aa4754118865fb4e1fb112a45142355db4b17a6b20ac279e5fefb707576c0cdf

Analysis

max time kernel
281s
max time network
984s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
05-04-2023 20:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.html
Size

1KB
MD5

017daa6b8b8738a55202b96049750742
SHA1

ce93b434141424b2158e90a01c682d3e17bd8556
SHA256

aa4754118865fb4e1fb112a45142355db4b17a6b20ac279e5fefb707576c0cdf
SHA512

842d81746e6254f3171e858faab3dd56346de5933286923f410a60886bdeeb50fe5ad5b43b896ff8904bb7e73d508de81a9243923c982b5f9b71816e37b0a563

Score

8^/10

bootkit persistence

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

MEMZ.exeMEMZ.exeMEMZ (1).exeMEMZ (1).exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	MEMZ.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	MEMZ.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	MEMZ (1).exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	MEMZ (1).exe

Executes dropped EXE 14 IoCs

Processes:

MEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ (1).exeMEMZ (1).exeMEMZ (1).exeMEMZ (1).exeMEMZ (1).exeMEMZ (1).exeMEMZ (1).exe

pid	process
208	MEMZ.exe
4264	MEMZ.exe
4992	MEMZ.exe
4576	MEMZ.exe
840	MEMZ.exe
1832	MEMZ.exe
3076	MEMZ.exe
4408	MEMZ (1).exe
4296	MEMZ (1).exe
1644	MEMZ (1).exe
3860	MEMZ (1).exe
2212	MEMZ (1).exe
1560	MEMZ (1).exe
5004	MEMZ (1).exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102
Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

MEMZ.exeMEMZ (1).exe

description ioc process

File opened for modification \??\PhysicalDrive0 MEMZ.exe
File opened for modification \??\PhysicalDrive0 MEMZ (1).exe
Drops file in Windows directory 1 IoCs

Processes:

mspaint.exe

description ioc process

File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

12068 64 WerFault.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	MEMZ.exe
File opened for modification	\??\PhysicalDrive0	MEMZ (1).exe

description	ioc	process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe

pid	pid_target	process	target process
12068	64	WerFault.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exemsedge.exemsedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 31 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{5E6B5119-D3FE-11ED-BDA1-EEF7611730E8} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLLowDateTime = "1251635200"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "876352010"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateHighDateTime = "31025163"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00fe57380b68d901	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\VersionManager	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateLowDateTime = "876352010"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000eb827cf93ddd146af8365c0e3ca130200000000020000000000106600000001000020000000328f519c106abceef8787afdfe8db75c7a3746ade4346b6e3b8cdc95462e4cc0000000000e8000000002000020000000c223509a205892cc68b61fa35d0528210dd336ab4331bc6aa56c3ed8f08468e6200000005e8ff83d99b1aca4ffcead4a453e84ac0e2726f64a916100e0419845bb9d4238400000003c4fe16cad98be9e56bb9165e612828b1e2ed66421670e8f411cedf4da97470b4ee17961579e397586dedb06e896efe4b9f8b85bb26140e69280f5ec2903cd44	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000eb827cf93ddd146af8365c0e3ca130200000000020000000000106600000001000020000000a3c3e856641450d546a43c5bce75ec75f84c185ab3f965721b180999ca51ad29000000000e8000000002000020000000291389e4f62a843153f3d586c87c7148f56f9364ce2dd951865005daf13a172d200000002240d95ddd08125f51061ad58bfcf2711a346efd1212983ed3694ba1e157e75640000000e83c1d70d7ab708a9b64778add0376ea27e46d4dd5558d0c5043eef93187d98cc965b3d441a036774d7b1213c88aa406737db897117536ced6c1c796cd0229ab	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\MINIE	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\IESettingSync	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLHighDateTime = "50"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0fc45380b68d901	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31025163"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133252061255269320"	chrome.exe

Modifies registry class 3 IoCs

Processes:

msedge.exeIEXPLORE.EXEchrome.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4238149048-355649189-894321705-1000\{E841FE0F-BC47-450F-B56A-C9E940704D6D}	IEXPLORE.EXE
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4238149048-355649189-894321705-1000\{A6BCEECC-1129-4107-A1CD-EA64130D93DF}	chrome.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

chrome.exechrome.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exe

pid	process
2804	chrome.exe
2804	chrome.exe
4128	chrome.exe
4128	chrome.exe
4264	MEMZ.exe
4264	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
1832	MEMZ.exe
1832	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4576	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
1832	MEMZ.exe
1832	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
1832	MEMZ.exe
1832	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4992	MEMZ.exe
4992	MEMZ.exe
1832	MEMZ.exe
1832	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4264	MEMZ.exe
4264	MEMZ.exe
840	MEMZ.exe
840	MEMZ.exe
4576	MEMZ.exe
4576	MEMZ.exe
1832	MEMZ.exe
1832	MEMZ.exe

Suspicious behavior: LoadsDriver 3 IoCs

Processes:

pid process

664
664
664

pid	process
664
664
664

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 39 IoCs

Processes:

chrome.exemsedge.exemsedge.exe

pid	process
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5464	msedge.exe
5464	msedge.exe
5464	msedge.exe
5464	msedge.exe
5464	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe
Token: SeShutdownPrivilege	2804	chrome.exe
Token: SeCreatePagefilePrivilege	2804	chrome.exe

Suspicious use of FindShellTrayWindow 48 IoCs

Processes:

iexplore.exechrome.exemsedge.exemsedge.exe

pid	process
3784	iexplore.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5464	msedge.exe
5464	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

chrome.exe

pid	process
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe
2804	chrome.exe

Suspicious use of SetWindowsHookEx 8 IoCs

Processes:

iexplore.exeIEXPLORE.EXEmspaint.exe

pid process

3784 iexplore.exe
3784 iexplore.exe
4556 IEXPLORE.EXE
4556 IEXPLORE.EXE
5392 mspaint.exe
5392 mspaint.exe
5392 mspaint.exe
5392 mspaint.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

iexplore.exechrome.exe

description	pid	process	target process
PID 3784 wrote to memory of 4556	3784	iexplore.exe	IEXPLORE.EXE
PID 3784 wrote to memory of 4556	3784	iexplore.exe	IEXPLORE.EXE
PID 3784 wrote to memory of 4556	3784	iexplore.exe	IEXPLORE.EXE
PID 2804 wrote to memory of 2668	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2668	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2476	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2952	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 2952	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe
PID 2804 wrote to memory of 4600	2804	chrome.exe	chrome.exe

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3784

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3784 CREDAT:17410 /prefetch:2
2⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4556

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2804

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffec7169758,0x7ffec7169768,0x7ffec7169778
2⤵
PID:2668

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1800 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:2
2⤵
PID:2476

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:2952

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4600

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3168 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:744

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3304 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:488

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4512 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4940

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4660 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:5052

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4796 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4616

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4800 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:720

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:2416

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5432 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4564

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
- Modifies registry class
PID:2036

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5284 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:3276

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2844 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1944

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1760 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1208

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3372 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:556

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2512 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5776 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4660

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5436 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4904

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5520 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:392

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=2444 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5340 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:2052

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=1760 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1388

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4996 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:384

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6080 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:376

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=3260 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:3084

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5424 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1032

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5964 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:3076

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5648 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:2564

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6268 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4576

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=4688 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:1976

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2648 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4128

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=3204 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=6384 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:3944

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=4980 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:2100

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6448 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4596

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=6536 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:3708

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=5004 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:552

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=5656 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:3440

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=6980 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4348

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=6560 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:2200

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=5928 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:4592

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=6176 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:1
2⤵
PID:2708

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7112 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:3592

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6296 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4980 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:1884

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=952 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5160 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:3280

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6280 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4304

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:208

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4264

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4992

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4576

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:840

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:1832

C:\Users\Admin\Downloads\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ.exe" /main
3⤵
- Checks computer location settings
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
PID:3076

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe" \note.txt
4⤵
PID:3524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
4⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:5116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:3236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
5⤵
PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 /prefetch:3
5⤵
PID:596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
5⤵
PID:3684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3532 /prefetch:1
5⤵
PID:1540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
5⤵
PID:2876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
5⤵
PID:5356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
5⤵
PID:5632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
5⤵
PID:5808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3100 /prefetch:1
5⤵
PID:5800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4008 /prefetch:1
5⤵
PID:5992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,783493244298267826,16641243637928821472,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
5⤵
PID:5984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
4⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:5464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
5⤵
PID:1556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
5⤵
PID:5904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
5⤵
PID:4656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
5⤵
PID:6092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
5⤵
PID:6124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
5⤵
PID:5344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1
5⤵
PID:6080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,1839626846248706127,15170305082976098385,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
5⤵
PID:5924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
4⤵
PID:3428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
4⤵
PID:5384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:2868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
4⤵
PID:6132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:5332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
4⤵
PID:5940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:5076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
5⤵
PID:5536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
5⤵
PID:1548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3036 /prefetch:8
5⤵
PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
5⤵
PID:4320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
5⤵
PID:4528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
5⤵
PID:5824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
5⤵
PID:6112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
5⤵
PID:3308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
5⤵
PID:5264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
5⤵
PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
5⤵
PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4560 /prefetch:1
5⤵
PID:4980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
5⤵
PID:2588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1
5⤵
PID:872

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
5⤵
PID:6092

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
5⤵
PID:3968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1
5⤵
PID:5724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
5⤵
PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1
5⤵
PID:424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
5⤵
PID:5408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
5⤵
PID:1848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
5⤵
PID:3612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
5⤵
PID:3912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1
5⤵
PID:1544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1
5⤵
PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
5⤵
PID:5160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1
5⤵
PID:5680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1
5⤵
PID:5768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:1
5⤵
PID:316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7540 /prefetch:1
5⤵
PID:3708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7416 /prefetch:1
5⤵
PID:6464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
5⤵
PID:6556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8068 /prefetch:1
5⤵
PID:7076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
5⤵
PID:6196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1
5⤵
PID:6212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1288 /prefetch:1
5⤵
PID:6296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:1
5⤵
PID:6264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8340 /prefetch:1
5⤵
PID:6340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7616 /prefetch:1
5⤵
PID:5460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8380 /prefetch:1
5⤵
PID:6620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:1
5⤵
PID:6236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2104 /prefetch:1
5⤵
PID:6664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8452 /prefetch:1
5⤵
PID:5712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9492 /prefetch:1
5⤵
PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9724 /prefetch:1
5⤵
PID:2384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=9732 /prefetch:2
5⤵
PID:7136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9936 /prefetch:1
5⤵
PID:7044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9748 /prefetch:1
5⤵
PID:4684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9928 /prefetch:1
5⤵
PID:3648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10276 /prefetch:1
5⤵
PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10456 /prefetch:1
5⤵
PID:7204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10176 /prefetch:1
5⤵
PID:7280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1
5⤵
PID:7476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1
5⤵
PID:7548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1364 /prefetch:1
5⤵
PID:7736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10244 /prefetch:1
5⤵
PID:7812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9504 /prefetch:1
5⤵
PID:6828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
5⤵
PID:672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10944 /prefetch:1
5⤵
PID:7980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11256 /prefetch:1
5⤵
PID:7220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10680 /prefetch:1
5⤵
PID:4740

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10692 /prefetch:1
5⤵
PID:7752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11592 /prefetch:1
5⤵
PID:1200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9348 /prefetch:1
5⤵
PID:5968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11520 /prefetch:1
5⤵
PID:916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10792 /prefetch:1
5⤵
PID:2564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11244 /prefetch:1
5⤵
PID:8056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11204 /prefetch:1
5⤵
PID:8996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11988 /prefetch:1
5⤵
PID:9092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10788 /prefetch:1
5⤵
PID:8456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12456 /prefetch:1
5⤵
PID:8548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11696 /prefetch:1
5⤵
PID:6688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1
5⤵
PID:3720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11612 /prefetch:1
5⤵
PID:4036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11448 /prefetch:1
5⤵
PID:8284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11532 /prefetch:1
5⤵
PID:5564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9992 /prefetch:1
5⤵
PID:8268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12468 /prefetch:1
5⤵
PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12048 /prefetch:1
5⤵
PID:8496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12668 /prefetch:1
5⤵
PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11060 /prefetch:1
5⤵
PID:8428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12768 /prefetch:1
5⤵
PID:5160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12936 /prefetch:1
5⤵
PID:7492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12920 /prefetch:1
5⤵
PID:6168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10756 /prefetch:1
5⤵
PID:9044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12672 /prefetch:1
5⤵
PID:7228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13620 /prefetch:1
5⤵
PID:7876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13008 /prefetch:1
5⤵
PID:6484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13908 /prefetch:1
5⤵
PID:2168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14028 /prefetch:1
5⤵
PID:8788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12312 /prefetch:1
5⤵
PID:9336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9756 /prefetch:1
5⤵
PID:6168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11972 /prefetch:1
5⤵
PID:9356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14152 /prefetch:1
5⤵
PID:2484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14192 /prefetch:1
5⤵
PID:9980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14128 /prefetch:1
5⤵
PID:9668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10940 /prefetch:1
5⤵
PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13144 /prefetch:1
5⤵
PID:5364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12556 /prefetch:1
5⤵
PID:3552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13868 /prefetch:1
5⤵
PID:10060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13340 /prefetch:1
5⤵
PID:9984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14448 /prefetch:1
5⤵
PID:9600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14296 /prefetch:1
5⤵
PID:10048

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14508 /prefetch:1
5⤵
PID:10268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12072 /prefetch:1
5⤵
PID:10596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14364 /prefetch:1
5⤵
PID:11176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14560 /prefetch:1
5⤵
PID:10872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14084 /prefetch:1
5⤵
PID:10888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=15016 /prefetch:1
5⤵
PID:9696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14716 /prefetch:1
5⤵
PID:10556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=15216 /prefetch:1
5⤵
PID:11164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13836 /prefetch:1
5⤵
PID:10904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=15340 /prefetch:1
5⤵
PID:11236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14868 /prefetch:1
5⤵
PID:6840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=15252 /prefetch:1
5⤵
PID:10756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
5⤵
PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
5⤵
PID:9636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=15156 /prefetch:1
5⤵
PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12688 /prefetch:1
5⤵
PID:11472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5085489590967834696,4161311705300813515,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14932 /prefetch:1
5⤵
PID:11788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
4⤵
PID:2952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:5544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
4⤵
PID:2272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
4⤵
PID:6384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6404

C:\Windows\SysWOW64\explorer.exe
"C:\Windows\System32\explorer.exe"
4⤵
PID:6448

C:\Windows\SysWOW64\control.exe
"C:\Windows\System32\control.exe"
4⤵
PID:6152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
4⤵
PID:5692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
4⤵
PID:7092

C:\Windows\SysWOW64\mspaint.exe
"C:\Windows\System32\mspaint.exe"
4⤵
PID:5468

C:\Windows\SysWOW64\calc.exe
"C:\Windows\System32\calc.exe"
4⤵
PID:7464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
4⤵
PID:8136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:4988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
4⤵
PID:7008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:816

C:\Windows\SysWOW64\calc.exe
"C:\Windows\System32\calc.exe"
4⤵
PID:8656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
4⤵
PID:7176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7420

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
4⤵
PID:8704

C:\Windows\system32\mmc.exe
"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
5⤵
PID:3712

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe"
4⤵
PID:8804

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
4⤵
PID:9192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
4⤵
PID:8404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8512

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe"
4⤵
PID:8748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
4⤵
PID:3492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
4⤵
PID:8732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
4⤵
PID:3168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:2260

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe"
4⤵
PID:9616

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
4⤵
PID:10112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
4⤵
PID:9572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:2052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
4⤵
PID:8904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:4044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
4⤵
PID:9404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
4⤵
PID:9988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9412

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\System32\mmc.exe"
4⤵
PID:9392

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe"
5⤵
PID:9028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
4⤵
PID:10140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
4⤵
PID:6684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
4⤵
PID:7320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
4⤵
PID:10456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
4⤵
PID:11020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
4⤵
PID:10468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
4⤵
PID:8276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
4⤵
PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xdc,0xe0,0xe4,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
4⤵
PID:10596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
4⤵
PID:9472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
4⤵
PID:10840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
4⤵
PID:9420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
4⤵
PID:10224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
4⤵
PID:11360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
4⤵
PID:11916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11980

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5764 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4820

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6224 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7156 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4932

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6216 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:4792

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6040 --field-trial-handle=1816,i,111376207942247332,9924443053710919045,131072 /prefetch:8
2⤵
PID:1876

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:4408

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /watchdog
3⤵
- Executes dropped EXE
PID:4296

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /watchdog
3⤵
- Executes dropped EXE
PID:1644

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /watchdog
3⤵
- Executes dropped EXE
PID:3860

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /watchdog
3⤵
- Executes dropped EXE
PID:1560

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /watchdog
3⤵
- Executes dropped EXE
PID:2212

C:\Users\Admin\Downloads\MEMZ (1).exe
"C:\Users\Admin\Downloads\MEMZ (1).exe" /main
3⤵
- Checks computer location settings
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
PID:5004

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe" \note.txt
4⤵
PID:2908

C:\Windows\SysWOW64\mspaint.exe
"C:\Windows\System32\mspaint.exe"
4⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:5392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
4⤵
PID:4248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
5⤵
PID:5184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
5⤵
PID:5208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
5⤵
PID:4720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
5⤵
PID:3148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
5⤵
PID:5568

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
5⤵
PID:4356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
5⤵
PID:3972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
5⤵
PID:4780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
5⤵
PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
5⤵
PID:4784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4552 /prefetch:1
5⤵
PID:5488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
5⤵
PID:5164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
5⤵
PID:3848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
5⤵
PID:1888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3756 /prefetch:1
5⤵
PID:5292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
5⤵
PID:2552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6508 /prefetch:1
5⤵
PID:4484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1
5⤵
PID:3896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
5⤵
PID:4832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,17947250520067473507,5126165053765124716,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1
5⤵
PID:3064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
4⤵
PID:2112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:2368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
4⤵
PID:5524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:4620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
4⤵
PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xc0,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:2604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
4⤵
PID:5312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:1276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
4⤵
PID:5012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:3516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
4⤵
PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6224

C:\Windows\SysWOW64\explorer.exe
"C:\Windows\System32\explorer.exe"
4⤵
PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
4⤵
PID:4548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
4⤵
PID:6936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0xd8,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:3956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
4⤵
PID:7396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:1008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
4⤵
PID:544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
4⤵
PID:6680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus
4⤵
PID:7640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
4⤵
PID:8896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8908

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
4⤵
PID:8872

C:\Windows\system32\mmc.exe
"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
5⤵
PID:1288

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
4⤵
PID:916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
4⤵
PID:7952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
4⤵
PID:7244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:5124

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe"
4⤵
PID:8504

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
4⤵
PID:7784

C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
5⤵
PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
4⤵
PID:1444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:6716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=g3t+r3kt
4⤵
PID:9240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9256

C:\Windows\SysWOW64\calc.exe
"C:\Windows\System32\calc.exe"
4⤵
PID:9892

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
4⤵
PID:9536

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
4⤵
PID:6292

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe"
4⤵
PID:9972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
4⤵
PID:9300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
4⤵
PID:5952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8112

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
4⤵
PID:9484

C:\Windows\system32\mmc.exe
"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
5⤵
PID:7160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
4⤵
PID:7000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:7564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
4⤵
PID:10040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9544

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
4⤵
PID:10436

C:\Windows\system32\mmc.exe
"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
5⤵
PID:10520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
4⤵
PID:11092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
4⤵
PID:10700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
4⤵
PID:11008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
4⤵
PID:9460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xc4,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
4⤵
PID:1300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:9628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
4⤵
PID:10764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:8272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
4⤵
PID:9800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:10732

C:\Windows\SysWOW64\explorer.exe
"C:\Windows\System32\explorer.exe"
4⤵
PID:1876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
4⤵
PID:11028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:4716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
4⤵
PID:11640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
5⤵
PID:11668

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1080

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5172

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:5436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3688

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x36c 0x4ac
1⤵
PID:5704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5248

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6724

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
PID:808

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:6992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
1⤵
PID:5212

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:7424

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:3720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:8180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
1⤵
PID:6540

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:8796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:8660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedf2d46f8,0x7ffedf2d4708,0x7ffedf2d4718
1⤵
PID:8884

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:10068

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:8384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5088

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 64 -ip 64
1⤵
PID:11988

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 64 -s 4992
1⤵
- Program crash
PID:12068

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Web Service

T1102

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Filesize
48KB

MD5
66d514f7a4e15967dd615da85477a4fc

SHA1
c5a54d294d0e31d2af5f0aee49e2b762d343899b

SHA256
862beacad0e0cf5c98ac73d8125cefbad0612fe5cd62afd431879347f8b51a4a

SHA512
ac67c6e691a33997cb6c118ccef1f68418b2b18dcb2c31220cb73692f1c7119865c2fb337b2a7c266426d40f8c0d472413ab7996b8a8444e1b300282b4a49569

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
Filesize
20KB

MD5
923a543cc619ea568f91b723d9fb1ef0

SHA1
6f4ade25559645c741d7327c6e16521e43d7e1f9

SHA256
bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd

SHA512
a4153751761cd67465374828b0514d7773b8c4ed37779d1ecfd4f19be4faa171585c8ee0b4db59b556399d5d2b9809ba87e04d4715e9d090e1f488d02219d555

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
Filesize
37KB

MD5
47ae9b25af86702d77c7895ac6f6b57c

SHA1
f56f78729b99247a975620a1103cac3ee9f313a5

SHA256
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224

SHA512
72b5296e3dd1c5b4c42d8c3e4a56693819779167b9f02bc2d5f5a626b519a9cf10bee59846d614c929c42094b65d13039f6024f6cb1c023e740969aaefd060c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
Filesize
28KB

MD5
3e327ea9603d97d778026e7dc56e0965

SHA1
a7b618711600da8c2ad4e8583b33b8320554c1cb

SHA256
421c17beb7df0e15e15482b7d949b6dacc4bb6ef5de0656e04412d3c6efabb88

SHA512
eb13e004241d2b36b4d1460ea40b6bce618d1c16be341224d95accd68d24404115269a6c3f0b94ea01fa76fc9871efd1071468a99fe8276b515d7206e1450351

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076
Filesize
43KB

MD5
95219bae381d4b1ac536be7588fc8765

SHA1
3a91ec9e63e50a41e96e955e269f3f471b95d209

SHA256
ee4bc6a2f879efadfee14dc58f0e24a552a53daad3bd40b8a38849d9585ddb05

SHA512
7d5a8eb94677c55d1f2daece2fdbe70a4be90ede7538aaddf35075885d5f21eb5933d282de306ac6b51118c5ca482e674f6b8ff33a6e24d22a302ad2313ce552

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000079
Filesize
86KB

MD5
5386f516b0955f166688e243ec86f105

SHA1
62e90114a048e1ba332ae7858f0d3fea99264925

SHA256
91ec5c562ec49eae0ba58a65fe522b92cc9e28e9a8aebfb6a8f9c084a2a8d00a

SHA512
a3d771c30f7b5f780a7590c7b2d32b75d802db3e7aff99a718ed2d07185e417a05519dcbc83ee0770873c9611a6e9262e2fbe5d03115e520fea3ba3a9fed95b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e
Filesize
19KB

MD5
ca7fbbfd120e3e329633044190bbf134

SHA1
d17f81e03dd827554ddd207ea081fb46b3415445

SHA256
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

SHA512
ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000094
Filesize
48KB

MD5
808cdff23bfa39cf36fd83f53938175e

SHA1
74727d19b0f2eff8a94b1d8a186ec4745cfde233

SHA256
87293cd737b39a1b59353101584ca3af1c980ecbd135284de0528e4c18e3b496

SHA512
3b891fdbfae36a3769acc9212a60a70a490df60c203ab4dd429282cd4fa128a25e219811dee2be4a1e37401593422797a35c94864af139c939d833d5c5b9203d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009e
Filesize
29KB

MD5
f8d4cd97e53436f3c20d32bc3dd18695

SHA1
b412cb15b2b545181e6f3075e9847e6f1f5802e8

SHA256
45a61a04904fc2115c440a349a65dc93d2965b0b24dc5a8172bd8b792bdbf103

SHA512
169197af2b468514c86c2f9434b4e62a814eec67b32fed51ba25484a15d69c8569da63e2776eb14c3587868731bb2482a375daefcd6ee8bad82cd2bcb9b78b5e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
864B

MD5
252b1f8a2d139632777df1b8217fc13c

SHA1
39feed595513ae9d180e3b6803aba9d8ff0b7081

SHA256
168107c0a1db4d020d86007c9fec4f9f900cf4729b167378268616b942fe5df4

SHA512
b025b4afcd314e911241ee0c82563a6df0581e0e606c419491fecbdd559cfbb58f9c3bb05450cc02dc62207faf42f12f89d88e8573f62d24d35489c4217ceece

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
c7ed712fe504d777ecbbbe1c33ffc5ae

SHA1
da1437199dd94fe8acfbb805fb985722abfc0812

SHA256
98eaf562a74bca793e594e8d46b99fbdf4f51ee49e5bde9cc48e21cac046ec98

SHA512
21d3f8260cb4f8ddecd2d125965e4145a7ca8153ef5e872d342beca3d158ab9213cdb065b821a8b81a1aec202cc42f5515a74d1553eeeddddc798d06464c90ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
3KB

MD5
6da343ac63d8ed0b2c57b68b6895388d

SHA1
53fd9dc592e05997351e086aea6065b30026b9ec

SHA256
3657b53209973da2575dcb3964d5bda06c396a1d7411cff49e79415dea73ef67

SHA512
8d95c4306a194637015f73e9591f9b0f20c84ccfc03feb9421a42b75e4f1ea0cf50b1876db0261b9c30068dd00218ec5134b444e8f6c037a31318e221b43e152

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
7KB

MD5
a29afc524f214e86762045c022ef2c85

SHA1
4504a10dca54eca4c27106429706e218aa8117aa

SHA256
33bcef2a4d784ab224c79fff09a1c3e97bb719aeb1172ac6134828a378ac5031

SHA512
11cdc9479523ae65f106ad1f59a9d889938beb7cec416795e25c2710cf454fdf90227cd515409585f94820263cf7986f57336cdd89046be13d8529222c78bbb9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
12KB

MD5
f0be9d9c0419b08a92b25f6c2358df5d

SHA1
c6ba7fe661085e896df3650b48f94520390a178b

SHA256
169d2870cfc7d938c210832ff2d033518bda2d8f7ae4595e407215ee43d5b7e2

SHA512
c09e272c48c249188b44822daa2ea91463b83b4443f2da717ac8ba63aecdaff30527c32ee68de7e9eafe88792c267ff3d5740555fb93eb1df733bc624ca237aa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
4KB

MD5
6d79e0f17e28ce8c4f5df8d65e1caa5c

SHA1
236eaf2948c4904ed683b5bc08fd0e82c9817f28

SHA256
831bbc0a3c6efb7b080deae785c916c477250470325a9fb14819eccacd93c778

SHA512
0c19618b09a2a9b4c3046a3391976cc4263cda9e0d0ba53ea33064b044d8ed288e6e8aeec294ebea78c3a44134106745e0657ed3fd49a9034affccc74e5b5789

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
4KB

MD5
1a633fe424ec15209aa4457569c413ba

SHA1
7b4f4742430d7548fbb768928446250b3d333fa6

SHA256
72c9243ccd591459bcf4654811449088e621c32ba7fac004b1ca87f059dc0660

SHA512
0a0debe11d21ada703d2fc097b825a6b89f400a355ffe94762e17ad82d84d024775c39c3cbacd0c4f542bcb53ffea0c24ddaf8c67e3cc3ba5b08b7943893b6b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
b91b5f829fcb18e96e9f8b87268240fb

SHA1
5317210f71c09084ae7c8cbc30d3a0e152245e6d

SHA256
d59ffb7a6469de1185f34b905f81359f987c0e83e86a9e94e8dc2d215b353044

SHA512
9f85b898adbb7a4ef7137a981889d74144977cc3d2c0277ddc9e0c4d9a9e5c9984edebe4f26b3d2f7147e3b007e1777c0affb052c84564d61f5e29eb5bc4c30b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
4dc587ec6a875699665d6e68a66c5c0e

SHA1
8d90df82b530d6f0115dd4f4dd1d4495d427fac4

SHA256
5b08670ddebf13f90ba27396f40781150c9a7def39c21bc75aaede89930c755c

SHA512
02d22145a2c02349135fa09c4e1a1433a8cbe12b516c180f9a79b1ce169c23c82bb14bc98ac942e0d95b69c220497c4b1611cc3650b8c563463ec1dbfa0a6e13

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
0b0df818f844d3e67855df98de533aec

SHA1
ee53ab33304237fd3f677198f976cef06d5e76ad

SHA256
bd1599ba08fc65816bd6d85f03914ecbc4ccc3187a2951ce4ebba69bc67fc8eb

SHA512
c6d66772906504b9e7b7c3269c3a67021327601645d7aa036e909c75f86085c0ebfb09c05adc4db67656e6e37d42c67404f847af972767e6e9580f8e109d85c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
3d2c046df9a430578646066d6a29a6b9

SHA1
5b8720538c44d4318d8bbfd50b9c268601190fdc

SHA256
aba578733de42a260512f33d8f4e935390b407088f27ea001f6bfb44c2e6ab60

SHA512
413cdc22395bf183f1f4afe3559f2c6c50a95724264630fc04b8385d6e1f9182a1b2485a7459ce30dc27840e3c071b123aef2734a720cbdf46f8d5fdbacf8de8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
94125bdfe8adc771c43f96d85ff8be1c

SHA1
59e18bacec20c50cfecee60a859341974e501980

SHA256
ec3493cb6a0a2e85e9839bbf3481f48f529335dcb1c97cba31031a85c05ab61a

SHA512
8e7b9f52dd361387f04c77b35df1b1ffcd81346bcd275cf85e897e909e9eef059bac1c007012563c2ae99d409eff37b000e061db8ec3654e54323661b0a3f14d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
dad842a495ee5a5ca827d8eba07c06b9

SHA1
7e69e9938e7cd1f8d2ff3b2933df11e6aeba6dfc

SHA256
8bfa64398777557d9427cc7c4620c9207c87b98117fb794b7589dd9de8a479cb

SHA512
3266ada5a6835aa9f8888c256bafe6ab597c47064129b0292f8ee04255c8b3b3ee942d99e5eacf736c7ee4ebff5f89e5c6cfe1e62d236ff32c5959f2a0aa3e80

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
3KB

MD5
3fb0637c87a6e1d5f24b030809d70449

SHA1
f1ec9808a6ca7d5e9a611a746863582bd1003f1a

SHA256
ed2d8bee1a87377997e1c190b81ff502b4795be13d7bfc53629570d2513da8aa

SHA512
6f429f2ed7e3d70d7518649c1d073cce0241ba6980fa6099cfbc92622c7740d51f10299244083537e11775ddc38ea3d58cdf8bc726ff126e1e1f66d70a501ebf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
a87f9097424ba2b9ce1066fc67bb4a04

SHA1
8448bfa49de63f0075442f5876012239b6cc72d0

SHA256
f49a24faf7016944bcd2bb6503a597f4a97929bb4847ea95fd456af4f374c23b

SHA512
6e3c79b753d42708f418cf51a4604409dc0ddc561a9f1dfb3ab1d60725a6f90e644d68965f1c228efc7c4a1d99ac473814736a5309ac19265d6929c84600e2ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
6b14534a93ab38f89a5d5c42429f10bc

SHA1
c5b510f80e43413bd3325ed00a46340980fbbb8d

SHA256
e6386b3e76223eace0b7692d338e4f30f604cb007d797f2342ea53d986b9d926

SHA512
4b93d8cc5490782fbd6137160f86d5aa54cd57b0f8db28115ad32e6f6629dc9b187321ea03dc1ae89374e7697a62619b469f05497360d0217899ee7350b99247

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
07c46c12bd80bb5cdd9b80cc8485873d

SHA1
c94c45fd0557511459278efe40022a8deb5cba6d

SHA256
03e75170cef24804e9e8072f36629f0057d45f585ae0cf8c0e415450cbfdff0b

SHA512
d3488922e4076c011d478d5af55da69cc7d7f6a820f8e7300b0f4ee507f73c43fdb8d232ce15a707cf18ba425d271b1725320b708ab706a62012f24a24bd2438

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
1f901f39983503a6fd76eaa6060d5fc8

SHA1
89d491c7d72e477025de5a9d03cffd47d00b73f1

SHA256
6c72ba22f851e2eed42d60be493d443b61d0ee26f7c29fe7b6242d6d4a3b9174

SHA512
4d7d8be56fc01d881fa14e6992b125687052c71e496f07a36f57b17cb88bd4f9713d1c45a1bfe7f946f0b16e94d2d05993e2fe6b58998ecdf0052e332f1b41be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
7814f8565b137d207b72f2c0f0367800

SHA1
a52c9414db28103cb42a57088f03d25ced793367

SHA256
9a562d106029e6523d757315165cc7c09b7cfceeb6e85d731890a248b061d75e

SHA512
a728931dc0d7bad13a329c1b14060e996018470f4d40eebaf512614ece086d2674f142a4a0a69c2529f9c871eea7a6ad836304ef8a580b6ed773da0d5725e758

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
c348e41ab5597f3ea7807a42a58a87de

SHA1
e0ada0dc6b1d9d83903eb0154d8848aafaeb87b5

SHA256
e451f4ab26890c623085158fd6f839a4af48df86812deeec5a568e8c5275a3ac

SHA512
ed8d82a6abe14e6c534da82abebba16046ff65ee59b27d362f3d9d6712dce0e80441a262afba19fe5d89deb39b860ba36e2d09bc6550af38d17bbfda7ac15e82

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
ee47613b81686896ba1678405b13492b

SHA1
0a7ea6caeddbd37d64202b334db56ae8038ee3c1

SHA256
7afe790edf4593688c311a31708fa5f6ba0b30a3f2dece2389b32c8e7a4ad8f3

SHA512
3aaba164b527b80980c8156d0313e3ff6693bacda9a146de6ce7813d3ee861ca61e605e4beb9fdd02974f5edef9c409a22894c01ab2ec87fcee73b933d6343f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
7bc508b1ca7b24fdd16b88b40fbbcf62

SHA1
134e6b0f73f77413426ee51250b4be244d6de97e

SHA256
98426d58737815be9c43ac411127c2a5ed2b550480d91cf59e1a9e923797ad2d

SHA512
994ed5fb96dde969504f4f1a8e1ec3de91e82417c90b810e88b4f6e02dd4f0ff32904eb4b2726eb5079d903b4cc084f852f6663b73f9be3a3cee4af47094b989

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
6b092c83beaaa8939f2272250a1dc5c5

SHA1
25cce777e43da57401bf07543f2cf334fad7cef7

SHA256
8840a180cc970a4901c234191761840406184a3e7c37389764d043bcce3144d9

SHA512
af022787c718422573d58948015a6f86bf7c6e35d2eb5729f1ee968d2d83ce0a1c5f4bfc8c0cff717edfcef41c66c95c07d198639bb719da617b381c8ecc0e44

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
fe9f110008f1c2abfd10cab35d206275

SHA1
93891b6dfb8cd26526e9da4a7bcc5f2ad9b0e1db

SHA256
b416b6dbe5dd9c53301cdd8bd287a59dc3ce6036a3fea865b85dc4f427fdbf5d

SHA512
a65c86a24146e8f3a7e0ffa4c417f62aa5895d0af4f0cc9ddd43ec407f5db14910f81d4ce9839d53b5b3e2d390b9e0c8081567f74a27591500277ad2d9b3cc7b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
d967418fb844f63a7ae3d39c965eb9fa

SHA1
6d13f539984b103d876b607b28c938b63e0268b6

SHA256
15b22b9d6c917aff95a251913f2871c068b3a52cec8b8bcfc6f4285ce7f0e0aa

SHA512
300b492e648cfd9be10f73e4703a6653ffca49e0cd1b879f304e45e4315dfa1a1ff369b8c11074df14acb0acfbbc4dcb9af1daa587d400374a213d3546ea5b1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
2134fcbcaf343e7d79ac3c9e521451f4

SHA1
65072fdd5149888bb7a5e88e75cfdafac3977eff

SHA256
25f9bf11177af97f67bd090f59c29dce91ee5c7947f80062be59532348aa8ebf

SHA512
9ee4111c1d86093eee3d41e6d337071e5dfb3cc434cb4f4201b66cf50e1140dadd7b2ce01df2efe540da0052d7e9f8d128943f08347c8e7bf8b7b5c724235bda

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
a876cdddb11d13c9b581018624b2523b

SHA1
ab91c194ebeed08634dde01b4e9f01315be18846

SHA256
27da2922848a7773e83fcae552f875bfceaca4b1836733caac39ed46259b1909

SHA512
2f801b4d1e67078b15d14bfb8fbb1fdfcb313240c914c95549b4ed5bf7baf44ede6b186307d3642406ce54fc91d69a964dcd6efe49d47f386d35d2643a57c691

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
7KB

MD5
a8ecd03d45d5c0249928573a97f6cbf0

SHA1
c72a8d43f7e893969ddeb87918dcfd5c3c172aec

SHA256
4ac9c0382490787832a81d7bba1a2e1b0f9fa42e8482ee743a990715ba0b4e04

SHA512
ceb49d27581f5148ab4f03b2fdef2167b6b290cc2d1c8d8cb700dc2793e43fad8b948188a0ba180709402c44364cba52103f01f72a927d2de81d5e297e3ed960

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
d0df6772fb803d2ce6d8182d6528faa9

SHA1
50e38b33446e93cd36272f095b8314cc7cb362f5

SHA256
398afb7ec1d83c439bfc3f6df2f62f56ede6c5447e2a3036b4554dc4db6d02d4

SHA512
ced714a192c2c993dfdf2b4c22bb74b24cf188d13ea35f020a0a2e0920f57606841485aa6755b86c7f18bcf09255b03bbb18cf81014b1487a10acf1e9c5ba318

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
5c7dc0a486697d775ea20d33efe6a532

SHA1
fea1027011ec58849dd5939df83afda0cedc62e2

SHA256
0572d5f6e65013398e1ca39aa0c23bca528e437760c3b1491062993d75f8d6cf

SHA512
6ea5e8fc2721e16741d6ec7c7e0e6074977b800f0fa18cdf8bf673b6bedd4e912bc5eb0c0a5e5bd9abe5ef7fa43825de6f61cbe6d09ba526f92df833c7b09c84

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
bc9b22c48328b6d126f51c44cf81630d

SHA1
fcf57720c28a47bc8c33d1f979e4b6c5ee68797d

SHA256
0de71a47030b5d01ebf8108c5bd7cb7dfce6b7390e3b5cafbc59e9299d6c4651

SHA512
972e14f4fcbb73e1a596a693aac84ab4b883562b088bfa36164ef6a1b69659d521113c81e268ffd9485dd13b770731f0f89a35cd97e6daa8c64d273f075b1416

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
6521220ab13722325298e92a2d8da233

SHA1
bb17eab5aba2ea404c3feeaca86a271519adbdf5

SHA256
c4ae22896f3da29052b65ef35a4f670dde8606246ce3d5102dadd3417a97f1ca

SHA512
a114bd4f2c6ddafefe47e7cb3454bc7c16253bfb494327fc7136b72b3ddb11cc2d9354bfd78e9f428eb53c98c58ddbf08d0f6acdcd8b2ff3bf0c1ec7af742557

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
11d30b6deda41aa6f598783c285d5f0f

SHA1
a36aac89735d1cb0f61b6abe99ea5b1690f5ac67

SHA256
1f2652468d7f341f34ede21866fb8f0b1be2dec1cb2e66ae8751369a7a947cef

SHA512
dff9873efd322e0c2d7af821453a34fb5f8eced2ae12ea075b47f01a7a3d27362a47b54601889e64772bfb47a0a8d499b19f513f04b245de329266ced45dfc18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
bc7aa930e90bbc9cab24a069a91375b0

SHA1
a3b37ea55d2a35e86dbdbe19d0d2a88cb21ca9b7

SHA256
71c52103e63e8e8371a4ea60314ad3828fedb58507ee3911de977dc4f64131c4

SHA512
40e2e65d7e9043793d337dd3478982d686976f27abe42f743c562d2f4174201856761909a7ae29f43872d6d12137eefbfa41784f2953b19154e164606292c6a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
74a387fc3ec37f9c8b9d885e36ee77bf

SHA1
69b15c171fd5f0ed2f33f2aee28ab014dc460726

SHA256
8d628fbd638260bbc4278fb20946805f2511b1a9278bdbfcac44fa7b1d5fba65

SHA512
1e7da750958d4c504e59484544c73d70f1ac525b5b8de99d7dab5388275f592dd24598abd25607ec5690a1c7b2651f145bb8aa8c9b49a7dd64a66c0b2ae84ee3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
199KB

MD5
0adfdc92dc5adbf42962533604b88533

SHA1
604523920a8fa94a0857f3d098d2e90f1a756b3b

SHA256
53492b42436c307639624b9bd229a859bec7e81e8b87458ff86d66d0d7697a6e

SHA512
e71d9fe4038a529f121c3bdeace80e0a881a2ef4bb7c05d9c17da6a9c265431c918227f4cc70c1ee00f61ebf35616bc352db6147343213a5da72ed5654e24670

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
104KB

MD5
47fa72991a08ed63a6410e56830cae14

SHA1
6cedb33a0352f2e7e15fee056242d18196bc781f

SHA256
725603f008190e7f1cf6c192f31bfe000041f8badde962ddba0f28c704ac1e04

SHA512
0b0b35de6c93b8cb93b7e841c66a8e2fe1b9b7055adf5f99ba5d62a0225e47f1e7a5b5052b835493b3ec4f1c7dcd3c3753725dff532811368adc46c03e5ff849

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
117KB

MD5
9c3fc9e4dc4f5b63be6c56e7ca3ddb72

SHA1
6e9f08ccd861de653a82dab347e0cdb806046f81

SHA256
0a0d01c70184c43f8e88bbc251a3a9acd27da08dc9d1b43d9b153614d19133ec

SHA512
ca1ec56cb0dce0f896e2273372349eae56bf0011fdcef4fec322498436d27e985d2157c6537b11098ea6b2d9f2a27d7e9295aa30735d758263cd5c71e4adc206

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5881be.TMP
Filesize
103KB

MD5
1ba84c36a4508a9874b7538208a5fa67

SHA1
85202f14a416c329d7333b89668f97fe96bb7038

SHA256
8383cf300311f0bea577e1871f075b3f90ca9deb72c5d0cd7322f475a76a41be

SHA512
60214c794838f433ee5798bd6c304c5cad69a344f54405835c735961dd6ba94c366d8ae3c8db389f2aae4e16e975e2c9938cca4d03fea7b06b5a0afb33dd8bae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
b8c9383861d9295966a7f745d7b76a13

SHA1
d77273648971ec19128c344f78a8ffeb8a246645

SHA256
b75207c223dfc38fbb3dbf03107043a7dce74129d88053c9316350c97ac26d2e

SHA512
094e6978e09a6e762022e8ff57935a26b3171a0627639ca91a373bddd06092241d695b9f3b609ba60bc28e78a5c78cf0f072d79cd5769f1b9f6d873169f0df14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
91fa8f2ee8bf3996b6df4639f7ca34f7

SHA1
221b470deb37961c3ebbcc42a1a63e76fb3fe830

SHA256
e8e0588b16d612fa9d9989d16b729c082b4dd9bfca62564050cdb8ed03dd7068

SHA512
5415cd41f2f3bb5d9c7dadc59e347994444321cf8abe346b08e8c5a3fc6a5adae910eda43b4251ba4e317fbb7696c45dba9fd5e7fa61144c9b947206c7b999c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
65621744863bc73bfc8816ca10cf29ba

SHA1
028b975c9b485e74162bd2692c6b5c5a304b2ac7

SHA256
b0d6a73c6c76b2c9f68dcb709d78f20c8337c97eff1ccd2dc45a5b827ab97d2f

SHA512
badba897706c97d897e1e768bc7aa776f7c4824272985bc83aabc75608312363b7035d71654b2463bb25fbc61eb8529fcdf40791ffd2d1834d638d269c6af836

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
0553e98abd27fede2581f887db576240

SHA1
5b9102857b4007fdb4f1b3ceba044567825b9b07

SHA256
1064e20260a43e4f31f4f3904bd9334bd65433a8d23efa89ed26f60a0524cad0

SHA512
d9b8060f1d9ee4cb8713f3825515acbeada094e90edb3eccb4fdd64510391317295045891d3fff7a9979b05fb421e7fde01a16fff4d6d91c70691a6ad4cd5529

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
1a1b4a5026f49a8d24ef2134eb8c3bd8

SHA1
7b5769b5fefde9d46d9576731866131c6aae0dbc

SHA256
283478e9874256c1fe6db63d748fd5171ac69567edd1cb8adfad2d67bc897bd6

SHA512
3d6f810d7b7903406027bc2ec6b99ce267a5e0fc9376f2e64058019ff63f31a15a67e782adac6516ceef88c8fc382eb54e958e766102fd3fdbce1d989c13d1c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
94df551497d6396172b7de8d41974af0

SHA1
ba7b223f4d63fb47352c7dcdbeee82282cd6c958

SHA256
64ceef974bf1e3b25712a34339d8251f03ab12e691d70a57a8f7407933e8ba07

SHA512
4365012147e7aff6558abf1eb68b0f819a6bce11d035847a67fbf5401c04afe98965c0ebcb22bcd010d7fdca9be51925923ab387fdde7b7275fba6dab4c18aed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
621b6016e2c22645e5af7d824b2fed67

SHA1
46d988e74469ad6fa1df708558378da2b74310ca

SHA256
b53a50356b3ebfca74f09e392fcd556f7d71b277471ea8523b923789779e7384

SHA512
f76ca43df4b9f038773452bad0e40ca0c3981dfc57be534f7ce2b525eae9340413c903e6f0d0978f10f4713b23735c5e1f20e5675f9350c52cf694b74bfd8b0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\64a169e2-ecda-4922-a5e9-f8bc7868f9da.tmp
Filesize
372B

MD5
497c87432e0cd91694e4341ac3268846

SHA1
6d8883e8bf9f0f7bb8172973ad1bdc07e3c9b36a

SHA256
6b5f55aba03441e82d34c472e65b25d5ec33810d9f2db5238ce91d651b17a530

SHA512
e155e71712293207f9ded17164921f0d7339f4b49d0624e3204e15826e07a30b8a18f2f95528c3010bf67dc6676eb81ac4a4dc5e7e80b276552c4ccee1140aba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89c589c9-5e9a-48f6-afaf-3094ffa1d3d1.tmp
Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ade77ac-54e0-4d97-af64-0d7d3faeeb00.tmp
Filesize
18KB

MD5
6bebe4b21fbacad8405e66dea1bd5575

SHA1
914ec613ef6e6b8050d7fecfe5fdd8ee0a6b11b5

SHA256
40e3757c0846017cd24881c70c58bee5ca75e5fb7cf3e2f3604ecef31f3f13e6

SHA512
e02bdfae1ff0df2c2e73f2ac56845fefd8cd7924419d2a2a4d0f32c437319b1a7962cf27846b19af9382cb562b5915f230f2164bc7ff9071b58249ec2101b10b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Filesize
64KB

MD5
1067041b8fa46bae06ebeac837cb67ed

SHA1
9a1e51cfe25d04692592f1dc13ce75058db813d3

SHA256
e6f3a928b555e72664e65ac8d3455b7ace51ce76f205975f98daff89b3a5d533

SHA512
d16c71f87ebcdc4553cb5aa4283f84ba02178e80d237a99d56ec416377031af4354582d459abac88df5b06239e3fb4625466b478bbf67ac5f6f001e82fa58882

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Filesize
69KB

MD5
653ddfa6ef58acb8d1301530cbcfdfad

SHA1
086dfe47fd35656af67fd4e6ec1665be82c3cc75

SHA256
0c6e76bb8503f56df9f9abd6674487855750be459b3bbf285fdc13dc6b212a30

SHA512
be2e80cb737e631adf44651547b0636f137ab9b52bb79d852721997730d67c6a92278340d0e023aa1134cc4f72ea68814d5ee9038d5d7769c89dbb312027cc54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
Filesize
70KB

MD5
db47e9db744713afc0c0685711b5aaf0

SHA1
b6b97c3ee1387886af4b9d87a079f7cee137f48c

SHA256
acd54f34c229d243b3ef58008f532d6fb6e8f58578d439ad10ff0c5f982e0329

SHA512
afdd47bc02cb72078951eeffef99e2b0d0df6ed8ef39513c3b68fc5521c948b1e217b172e790ec916ff70598c29a93a164cf4dcbda123b482c9cf46aff99f5c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a
Filesize
142KB

MD5
1460fc81b1914e76a37c744bc7d87e9f

SHA1
4dd12d6a2586d97291d6d35784e94eb2d8e03a6c

SHA256
b3e8582a507559034ec40585750f9ef74681d8ee76ef90892521032e76011a0e

SHA512
284374285bd9285f016ab2d12a2cbdd86f65b748e5b78bbe5ddc50fb7e4bbeda18ac9b17871e921a74e9421daa2d7a9f1d376eb1f9d09dc07a0c977e1dd2e09e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033
Filesize
16KB

MD5
bd17d16b6e95e4eb8911300c70d546f7

SHA1
847036a00e4e390b67f5c22bf7b531179be344d7

SHA256
9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352

SHA512
f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034
Filesize
108KB

MD5
2161111e9cdeedff5bf2edf7d46e3e22

SHA1
236a5ff1df015ac536894d2ddd4dd2d6f3152898

SHA256
6d9e0fc3aae7a23f35b258b315559f178c96709cc68bb7e180e2308c998ad72f

SHA512
436150aab532e10d64597b154c96e4fa44d52841ecb2a98e324932dd785b4682278df07f92bf12bc7121851d1cb7c5c4e51d58df24ada48783d746e1955a8014

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035
Filesize
19KB

MD5
0a14336abbc548520813b828af75c79a

SHA1
086f5856abab29bf91f379277375b307ce0e1aea

SHA256
1195b01401b90ddf6d350479b6e29625279b51b28092da8e903c986577dc306a

SHA512
e663e5e15220ca32cbbbde9ca17e43c91b814eafae4d01de4cb75e67cf7543b832fce268804c6cc48eb32b51ba40e4f187e6285fa1c84a6ed8b2da9a3e49164e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036
Filesize
25KB

MD5
7f9e99900ada18bc63d113c78420951f

SHA1
655415f473c1957d78c1b623d98054d5935727b8

SHA256
2861b9825731bbc661da8f353dd48d8b7de088dc7aa1817ba58ef60b02991005

SHA512
d8a3be88895cebf873e88b3cb178b6ced7570c1ecdb0d2990d80ba84975eb098cf862ec6b7633d2e11f72bb10f8d5c4f18c996e952b4aad36bdc1557f1c8f135

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037
Filesize
73KB

MD5
09867090187e2af4a9823a9bae1c19d9

SHA1
9392a25e16dbbb99874c883a333e6b5262c89cf4

SHA256
a252cb0147f7cd2b42ea5077e8b56e511e767dc75a37cbf797eb32f297098b18

SHA512
f616b8551b5e54efa1a4a3229a83192760bc6f0e8f394629fdd78fb9c33c6ada5f59a3e106839563950a60ea354d348f5e998c889a1859e9d6ce2ae770b4bd0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038
Filesize
54KB

MD5
f336aa8997e48ff9d1f6f5af65722940

SHA1
c5b60a4a285c18fffe400ffa43fa410d8fc5d740

SHA256
145fa0c4f621344e8df91bcb8c8d34416291ca890571c7d5f7755a5a3e4acfe3

SHA512
551babbd8ef462616937a798ca9e81ae36e02004cfb410c5936a5696b3fb63c448b116583ca28e4d1a2f347d9021648a91d879f5bc7385fc55023adda4387414

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039
Filesize
17KB

MD5
19c73397068ded824edd2c5b13d0a9da

SHA1
7f0f149b66309aaba41974d524ca69390a34e4f2

SHA256
8c93e33fb098c30a82d774c6a9db9aa92ea0e34586e907ed7d9d2935582c6100

SHA512
8795cd26570fe65181d49676dd9cc9a8012bc22c3e505ac8ed8c1bea68ac7db7f77d6bade360a403a8d79cc4126ac18c2c10e3b83a163e3b42f2e3f60c32426e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a
Filesize
16KB

MD5
f8ffe834177632830120c0a3a6f21fd9

SHA1
1a8ee2bb318c89340a35d03458cc13faaae98c35

SHA256
944bd593cada9847a3e60d9efb8c47cc15b99c76b9994bc7f18e881f4792ecb6

SHA512
176ba7933a3ea94f4921e5321f5c91a562ce8d606c535afc44e287b3c2e3cd82b7e5e8e7d3f9e06be9bae287353390065215b2e7a36accd4d60012524707fe46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b
Filesize
19KB

MD5
83bbe8c9d8c062d6e6e0398d7fc1fff0

SHA1
96e997b75f82fb4e9b99d5a41740c5e63e15ca04

SHA256
1e725b632cfec5ba1ba5deff6bebc8a0f5287c5e7a59f3d33167600f0eda6f04

SHA512
f657866170a8cca3fd446c198fb1c29a6ee524a037235e66db88d2e2f09af260463a5db0880e24bf774082251adde272343a580fea17a2a7663137fd024a9646

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c
Filesize
50KB

MD5
5400cc1d97997db95a63c4e01c4c1c70

SHA1
a4a739feeed923080b47a10ed90f17f4c4b75066

SHA256
fe125988e5a5ca31f8f8648789930346cb81d587fc3c834debfcac8d94637ccc

SHA512
d4523e953bae167488deb8a99fe5bf57326448bffe377d0495f1f9f08f62f6579ced4d1c2e1c0246417aca6f9035813c69af91c989230cbbb70e8bc0be6b47c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d
Filesize
122KB

MD5
c79234a9c3f3f2bf6a4740eed2184988

SHA1
69788d462a9bf4280fdd68973b666909ace85187

SHA256
0038c5dd378096bf76feb01a0691098f2dbf7fb483542a1cde2a64d9792e450d

SHA512
4c6b9235f191bbc58a2177141574243683e5c7ecc58b05a74613c5856c4c81603ce8b1437b6a727ca9a063e0ab790b8c3489116fa40c9dba77a30452507c4f23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f
Filesize
16KB

MD5
4ed9ae58f3e2094afbd1cdf75c6e33fc

SHA1
047323c3215b3af488208455de8757c66c33845a

SHA256
d032eab6a45e54474762e2ef94ce266e80616f68cf48e06fb9aeeee1f3ed38c5

SHA512
9c82903fd84d6e9b4a936dd861f97f09d885f508bb39917f6af2c7768c5dbe5be4c61a980d4024c577b935efe777ea0fd47d884df45f840f395bb74890ba534f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041
Filesize
66KB

MD5
fc234766725d7b0494f99dd3188ae881

SHA1
23061239ef8a0ce83ac00b9cafbd2186ddff3966

SHA256
e37231d9284d68c366ca6a78135cd9083ad4cf4cfcd9f952df037ef082b2ea5c

SHA512
95eaf7d05a9e7585691b5f5465effa18a74a85d858a4975f70603bc3181759073091101edae7e6e3b61ef0b37afaf3257186dfc28abe4a248a14c59a8187c076

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a
Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000088
Filesize
35KB

MD5
aef13a646c7327cbd4a6d3bcebb034db

SHA1
7d9ee720386efcddc69c6d6f810732f5debfd067

SHA256
e22cf8b805411472bc63a30289ad2fddf603a0d4fb1f7ad6ba5a72511da75412

SHA512
ded8aad01610fd13228905f618dc5f6954fc4a175f4ddafb681bb504b1990d75b6c00d55907f8b25ee8aefbe35fbcd3966dd5de8d69351c83bc725ff554416b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008e
Filesize
61KB

MD5
f71b0894d35d9dffdcc3db2be42fa0df

SHA1
abfcb6ffe0b38228fcf03fcfd01e5ae7d363d9af

SHA256
bc12e3374035e04abc80bec91a6abccbc6f736c3f91ec29fcc5b715fb1b3dfd2

SHA512
bfb99588b5a33da1d78a2b79d0734029cf16cc85cba2c353361fd1187ea4fe3ad9baf250548edd96980ae07167a1026fae106c2f0fee8792d36479aa3b3350ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a0
Filesize
67KB

MD5
94a5181b36012cea469f6e2a34e1ba55

SHA1
854d3cf878abb2fa4be5ed07e22ad47e8e6cd74f

SHA256
16a68233b9910c5d39c4df6aa6e1482932739309206af495fa198e459d1eef66

SHA512
ad427460d3668bd88d7a01a5d9089ea284d43bb92bc7ce582c32754d2255f5ad9f71f1b63778241ed35251a93d7ad0fb5864c899ce748f18d2ab9c07ac552c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a1
Filesize
185KB

MD5
e70633ed78f6e3521774a87e6a0b0787

SHA1
9655deb30891f536a342dfd89f4ea5c27d8ebad7

SHA256
eeadcfeaaa3ea79bc587376fe87e057e6d1405de6eb66f2f0dd6a7a950fa86f3

SHA512
7d51619148397ff1b23c263175f3df284ad87e5feffb912cb19e09a75ae5e495397dddf3cba4a0b79670edc0d0a6695f22a79de157181afdb89bf4559b2f1e3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a3
Filesize
241KB

MD5
d76beede6a473a69f292864f2a17f005

SHA1
e9f6784d7e3ef8318a1f8bd30aa35aa0630b9464

SHA256
bf70246ac555896f154f960134f6fa3a67639f1321a8b5ac2a2ba2195da3899b

SHA512
08dfbb1df8f4d673b1a781fce96300971524c21e74e3746f4e666cabdee0aa0bea11d6a7c7beab25feb28fbb2dc6577f3621772071eb4881d7f5c0a9e6fdc2a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ad
Filesize
149KB

MD5
11bca2cbb61c884bd033517efa4dc434

SHA1
2f2323433e89226d6e9287e8083d0ed73cc9953d

SHA256
c68872bdb202789b154ed4f1b55dd1ee2fca50e0e36ae66efe7464a0a34a58cd

SHA512
188f8c0a3522c8922f962cf52ca4dc25a4ea75a2bca489569acc124a59c407d727b980a70bebaa57c9052fbbd00f22b26e3752d694cab69c214b510b2e700912

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ae
Filesize
280KB

MD5
910acf5557483da0577339f177462f53

SHA1
9c5f1beda39b489b29503a02f5477d4746dc8c27

SHA256
bb84ce2115308587801c227f1381e7d8c921eb89c6e2445f1d5a6b3afac85bb3

SHA512
289ab32e6e8acdf98d4f5eee20f431e59fb9e08d338cf81283d81738d2b2f401f2d4ad7ad6582bc17a0f73efaae09a588674a812fa2b66e0e45fd462d4b29878

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b5
Filesize
17KB

MD5
bbd974f4a2458b542da5af56c1e81032

SHA1
9be0883fdbf1c1318f9fc0d105bb1f0d19c94004

SHA256
915e257dd4d0a394ea0911930f9bd98f5ef3809ccda5913c774612f65a7d8b4e

SHA512
dc0cfc94e41970c7db45f7451f0a9ce2c18efdc3b8e9c1f9352c0580a5c9d3cbcd4da36fb2bd75ce2cb4167e566ca752c18a921d75f1e7879973bedb8c1018be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c4
Filesize
65KB

MD5
80bf7cd4acb53292f08acb3dc09df159

SHA1
48a6af6061639563f3a3afaefb5ddea3a43bb8e1

SHA256
a0bc52ec8e135d96636af392e6702f6d414b7e9a5a460cbe28e43fff16cfc813

SHA512
69e1e225f6e7954e9b8c066a3025841dd569895a64854a5b7ac38484c86dad6ab7478079c16991ca9b8b3760bccb9dfb7f4d27160b1e3cb02d1fd778e2571dad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c8
Filesize
70KB

MD5
11866f6d20acc2a9a2697ccfdc080b93

SHA1
36a01d249c4f1128b62186365163af61dcd26bec

SHA256
cf2a9b280be236bf2018f4579c6e8200290c8a13d2ab9610b8fbc0dfef434b56

SHA512
5999b6308628a3e08412cd0de5b4e4ac35955e6e87934922df574d77e135b9c96e5ce8576b559ced1b6fab8d4144e9234341178929500a4f9ec67cba776ed323

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c9
Filesize
130KB

MD5
6fcd13dc2af816395753cf6d76c9192a

SHA1
bbf1c992254c461048dced7c64f402862b897565

SHA256
d0ad908cf7ca44faa37805d473e883a43ef630e508ec5f099938885822a18c42

SHA512
85eecebe6e772a49d67735594b6b14466b860a0d4116a974708d93cacded158be3207c4d5433577015168ac15bbdee7b4889f903679d3fd2e20dd64d51dbd8c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cb
Filesize
287KB

MD5
72e744b6c4d58df53cf8cb9c6f8b2dbc

SHA1
79a75c46313e6f4cd2bdfed67c4b303bb343b12b

SHA256
1410aa6b0325b10c898b97739f8096c29eda35e621bb05978bd1062df20a1daf

SHA512
07e28d8b71ec702659467f5800f92f6a21c603e727ad1781530f9531524bf2e0669efc83b71d0d2ba5a13980f060a6042be2e600dda43e1569c891926b1c0ae1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e1
Filesize
127KB

MD5
824c763bf34716b0ec98082a46c46fae

SHA1
b41f23e963ca0f9ae887ccd6f5664d0b5adf69c1

SHA256
906ab262e93f5f9571a64aa2e3da059cb77a85a5e812f23586006c79c9fee661

SHA512
a1b200ea55b8622cfabe929ed48d0de07a12718e3b55bd77488b90ee976d26cf7d4ab174f2eb92460339ba4f2f9ecd6ff46b61261f67b87e1025ddc968193bbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ed
Filesize
20KB

MD5
236def247d8c1446c4a219ae1f7d58c3

SHA1
72bc6b43b971a14c3c9b9992059767b306d381d0

SHA256
cdae08282820d90c91831dd702adc11dfb3301da3fc342c6ad3180b4fad78738

SHA512
26a52d3333d671f2920fb79fe606a0f7b511ba0f84731ab418731230dc6c326219e922ddce19d7ad758804681f83b053fa5c6adf12b4ec498f336af73da03d9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fb
Filesize
50KB

MD5
c4a446e5e9f6b978c51a8a82a35df6a1

SHA1
4034b1e46a336b06301684cf314e5e6068a3c9d9

SHA256
3f31b277df3820a8ccc78dfde878dd45f7f26b150c3bcc08979a3dfb08379254

SHA512
a65b83c962c7dc8859d0876e73a819ac2cee8409da6bf0da715bb56c4af36f1e4156478198d6fa487aead8177b7f678278f076c0c5daab0af3e6c5068dda4b08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fc
Filesize
137KB

MD5
55af54f2aa78581195b879f6f7d39cba

SHA1
b906c958b2c05e8d87e7ff14ae263cffd0c4ca3f

SHA256
bb755fece3b4c3acc1489a15712909f907b2a4fcde0c458c8a95f7a4e906b3a9

SHA512
62c0fd66e808f01c7f2b52b45b029c0892b15df5870cad948073a12521ef078d1511f05cb114c71b60962d9beb2646ec636a3bc31067622bc33eff35ebce171d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fe
Filesize
276KB

MD5
d41b8ce5a324707e9e1ab88218d0af4c

SHA1
3fb46a901af9ad7a6449644f9062408f3924a418

SHA256
050c4479c9ae3e05b8f9fa6414797c88c948aed5539eaeda7eeee4afc608eea9

SHA512
b8e172b422d3557122081a7867357b705c6186ccdaab66ee834c3a04971d54a60f8a911876d44b56e5891513477cf6fb36a8b4bd3dc54c3aa10cfa1160f59c87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ff
Filesize
119KB

MD5
cc817069f01e365502f77759e44c3fd0

SHA1
d662fcb43e1e7b1d4c7d31e080dd2f22faebb53f

SHA256
10304f4f9c92fc4758897b4019acf23b5913559f7d96b950886b7c9239b69c6e

SHA512
a6ffa01821262e62cd3912b04f2f1d1a2436f9b93e0825c246024f414b86c662a3e8a00d820f395c52635602b335e91309928ef25df4a2ebeced1081d6b53746

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010c
Filesize
92KB

MD5
3c1da62bd3c3fcbddfc73eab251cb615

SHA1
e6091df16a0059d5ad699fec24d2d054b3d22000

SHA256
2c8b424c2274d24cb21fb3be1b0c5ae6e39054b924f240fcdaeeabf39522d5dc

SHA512
885005e2286c6a90a8a129df1c65feaabebe5ae4fb1358a6415b21aa2f515721972d8765b70bad13d66a867f13c574add8053318ed576139cd2ade7e8a57826a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000112
Filesize
62KB

MD5
aa10c6143b2d90809b66ab9bf7414716

SHA1
839a11b91d48aafa25067068565cfea101aac3a0

SHA256
bc5a84a0754d44731f0f8e29a12af0438a472e47275a55a4f72337f24677fdc0

SHA512
fdbf27f320a1f8b0a6e25ad17f53a7f62e64680f5eeabf39367ff5a096a4e310fa185d23e55bb6bdc11b115a05c40d640e1355253c980d0b47e6921345a8da06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a207d7e1f6601b9_0
Filesize
124KB

MD5
59f1ab9dca940af9056212dc79464a7a

SHA1
e7766f51f6e0295f704d964934e44e3c436e1f65

SHA256
6dd4b29a117d7bf0da787d0d06e48ef7d58c76c5be8bbd68357417bda1742409

SHA512
068a82370f603519325fd640a070cdf7b3ccbefb449c74645c4a7b25e209e48eb753c07c42c9613e54304ca3c0230a856439d451d8042f4fab91b91f7f7fa752

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d72594a2b6ee9aa8_0
Filesize
18KB

MD5
e80d79ef877fc87dd9e310816e34b692

SHA1
d7451c493e5ed5541e13cc35f20b61886df5b23f

SHA256
0ce080154992e753472c0f51f159ddc55ac13e8cfa767e8aa33b5878adcae71e

SHA512
89b4620048423220c1538a63fcd9fbd66077c3c002a1e8a65e99fceba2ac25bcca1c3acf476f513e48f1350ba24fb55a1e1714ecf51c3fd505609f5101148b14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e63ee7c0565abc9a_0
Filesize
286B

MD5
1ab21abf06e0fe52f368a32813c1d4e6

SHA1
20f7fdce01762c81bc637900b6f6d35f30a0abdb

SHA256
7ae546071923c6a9d66be7c13ca5ad9835a0dd9fc9b4d1f961920f99b853a3c2

SHA512
3ce8dc14ee730e8a50966d787413f3e5f6ecfd9384c066f19ba7ccbcc898c59b1dae7e18356c1bf1fb05f9d4996ce25755b22ab6d4dc780acbc734dac3c17a52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
48B

MD5
bca7ca833de6798750058b6934920ffd

SHA1
0f34b181c19ff52b15e32bdddba28c56078cd3ee

SHA256
099d88121d139b8d24d41b2b082ca0b3ffefd5778f1d25b2784528cac5bc9876

SHA512
cc51c5ac5417f77a41d077b396b6e858b27cb40586e70e6d951fa8c7e3dd1810feda3a072b329222710f18fb6747a8508c1474b94d03c5d73725c2ffcc25501c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
480B

MD5
eed62061b8ce1e1d66785d8af95c8ecd

SHA1
a954eae1231bc1cbf512277328ee2f81f7285279

SHA256
b62a60ce72217717c5dc1c5f49e5989c17f6f6bb0f864c9916577e6db8273b84

SHA512
c6a341a0e21ab2344d4331c377c82b1d24511929f7807febf7239d162116d52b7c4bdb14843066ca35c379e24382016d92ee8e43d8f1bd26e4c568399f6e8e72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
744B

MD5
6b3ea10f385636da4ed871484410b486

SHA1
55d75589b0d98ab375aa260453b517937c2c9a34

SHA256
11e4ea351954305956538348888136b801141008cb7b2458dc1c3e2f2e1ed5ab

SHA512
932b4d6bb150d23540442dff3414837132e0561aefa18e99c4ed0895e5588201e1f45a070ae9dd05b5190ae2ab2971c0585e8d3411cefb41180f5d2523e006e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
7f6cb3a33df79fc4521887c6dafbfe3f

SHA1
f414aac0d4d3f5e6104d4f8254c24c299a094056

SHA256
e98974a588bb3fdb1821684bab952534ffa4bc450fb6277972ee897b8f85ef1f

SHA512
d3ff0d0fae76be51b16f30cf3287f3fcdd0937d78976890a87383328dc0530deff171e135589f17c52dba162441784bb6731f24d886375f7d550d82113ba2a03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
6f9841867bbe36c42e14881753f54c2c

SHA1
f53b2de000d11473f444709fdf8a9e4dd7e673c1

SHA256
eb962a45ddf62a73ca0417a42ea7a7db14ed4ba4281a9bb19f94eaa000a67c19

SHA512
1d4d1d6c109b9e633002376140a8faa1fa523fe8eba13105e58920f5eb7438e6b52bc7db20389313d56c19c612fc2cf06f789197a87110faaf399d1ac04dbaed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
5KB

MD5
92d1e69a3e517e36e49ec06740b16516

SHA1
5d5d159128cdf46d96e71fe49317e6d147041022

SHA256
7e17bf6feb2008c469f6014971a8819d35d00d0db7b9af24b8d237a1e6c01d32

SHA512
6057b53070c9b05b52018a2d240b9383d370710c5befabb2e1c22e21ac9c220b1df142d6004f1afd6c82a662f8a1c2dcb126d5c0365e2606e5613e0515209e90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk
Filesize
2KB

MD5
1d37dc88823e7324641ae89eb8fdd5c5

SHA1
cf4f32a5969fcfd17418c7f3049fa621a292415d

SHA256
3740a8b2c2612b034b7695e0559a45518d44abf47fd178a4a33e7975ff4d6d49

SHA512
324c0dc064e2e501ee14533bfa5bc6ddf584d3f3271ac5ce6ea8c02d4da3b09cf6494003df35c6be9dada494cc9782de365b4316e51010408ef7b31da46bae38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
3KB

MD5
6ca87196b695461d96ffb9ba3a3a44a7

SHA1
4d6a9d8cc366dd8ddb2b474894bd42ac78355d07

SHA256
91726deaf343c05451c82238db75965a60c22cf657236fb098e6417fc05428d1

SHA512
ce7d5e446b46256142253c5f3242e1e56c91ecdc2ef9eff842a33ce8d2710d1911cc5ab3ad77a637d93b9dc7daaf69bb48b766a32c3e20cfd0f1b6cdfb31a83c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
24KB

MD5
b72a3a10e501f05b435324dff1e56c6a

SHA1
c4b78ba788bf18cfb010c03e2ece22d623bced04

SHA256
9cf2e312fc402388bc027e87f5a7acaed7555c7c80b674f7e3eaf7cea346a75d

SHA512
25591f10588068a2ca9278d15aed0d2e4e3e8f55c3d53192042cf732624570b98bd8d81d5c90fdb0c360e4260361bb3f6739fce91131d87160c59d7cdd80ec53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
24KB

MD5
170aef1b429467e4bbead64170b18459

SHA1
6dc662c745b29ffbe6c575d047abdab757f88ed7

SHA256
cc9b743f8077f545c9ea98b6a5a1041b8fa54de5725ff0d21fa9e76282564211

SHA512
837c5b03afecd9a82dd2aa15921125291d45a48993ddb99b1c8fdb46a66c23c6c9e3a8edcc5fa3647dae481fcfc307b0e8443cdc91debd1076d7bac0a522cbb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
2KB

MD5
821c4b8c55cdf2d73974a2c96ff4454d

SHA1
c8538c6dc1eaa45c35c5b502431085cf978bc280

SHA256
fa1ff80431c0d1b9f49116770d57cea855b7ffe135148192617770a5bf251571

SHA512
190ed24da9b6502eef555b2e7c1786a4c7bd111ef08f0c7d24003010ead99f02ae234088f2813678e51f1ebc2b59440aacb25aea9d0a2581ce49aa33be7aecec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
18KB

MD5
810b535be6b65d10e789a44c06793376

SHA1
0f1496cc342c2e789270799b1490aedc2a6d9461

SHA256
46c6bb3ae1fb30463cef2f62f5ee345e18fd6147e87387e75ebf71ad926a3597

SHA512
aeec384fd4ff70ef5c5361c1b34d753cbfb2685fe081606169ceec3b3ecd7d72a1daf2721eb1126d7aa5a9734462308465a0c630599ff45519d4277b500471c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
23KB

MD5
e5e3295dba46fcd4294ed9fdaa5fc5ba

SHA1
cd2d1c5e6e947197153602fd0e9fb853a677bd4e

SHA256
3c1c2021fb4e4287cd75d60de83f237636db0976dddbac08b8165c8d2f99e1dc

SHA512
d30aadc81895454970d196a67d1e6b6b80d0f5292dd130733c92ce53f9b0986f5f9eb53e71f57c5c581b25f85e02ea2030075362321bd567a7745e7e72825742

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
23KB

MD5
308cd32f46ab41274c201da5540c4a68

SHA1
aaa9e541c8c31132803c60f82932bd6595c13278

SHA256
9fb870d864fce03a0019b344eb49de613b2d05b4b8369490c4678e23399d1068

SHA512
ce7e0362201a3646b3703efe5fde0eb7c2063e9725ea79736bbfaaecb0b405dbb90881651e297c0bfcdcd90c76ded9dfafe2927b9267b327da9ac1351cc38797

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
4KB

MD5
23fd5895948b0967e7488d2c04f53caa

SHA1
c678cbfec26fe59bf0b2ad64e5039effadde55a9

SHA256
dc52644c669f4b314bb486c72ceb171f21e471753a2919b9d6f06b5c3875c2fe

SHA512
dfb3b9b10f844b815010e44f6b04636781775a3e30739e0399523efc198b2f6278f579ed96f8ac9945915d3134ab9c7615d707376e5dd462c10158fdcf1db0bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
4KB

MD5
e235f44ec6c232fa2f10244133907069

SHA1
306367be2a018c753a4885f12da4591cedc420f1

SHA256
530b63d7f8d128257d39f587d6653758fa481760fb205a0dafe176f4b63aff84

SHA512
dd97847350473199c22810562b78f1f2302e3283e428e578576dbcc4131259380a153524d937f59bd9db70c948d25760ec300f985ba91b79d23911eddf715cb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
c50119eea3af88d5e0e98333fc70ed8e

SHA1
1b832b6517262e9cae2a261c6cbb7292855483d0

SHA256
3053e4658dfc280b61aead76f2ba94b108467c340c10dd2860a424af0e616d36

SHA512
2e03dd896f4324e199f3d831c8d26d9157e51989e78c21e82f1bd91707658765d72ebb100d295187f2176663ad7d9921891bbce00b5501af39104fcfb4f947b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
0f1c1e8be7b6c4dac1d6f820622a471b

SHA1
69d25792a74d67e1a28c9bfcf63c65efa48a2889

SHA256
73cdea49933b682dd02960ac061fed775a23f03436756b0d8aaa58d7e4dda7c1

SHA512
fd66ca61e8d0d022e93b6f33e6b643c02c9c1a549337d5fb55c6c11a637b36c8242d3833dc1e9116713c51741181afed4aabf6fa8dd716d331c1dc4dc16d32d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
9239ed90d566c83d0bfb42b684e8c7d6

SHA1
86166826834398d14ab2883ffc28d0541d067148

SHA256
5a3cfc696f2f6b23fe36cbaa19d847b9f480d0db271aa7101396424789cddda7

SHA512
251cc429f86d1989b15fe9b866ac79d560dee2910915ce94913df4fc206c0982ca7a9533ba040d1dadada76872807b4e0d7a1fb2d05255189123b9b621c8ca13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
abb310b1709c7245a3adb1f8eb4119b2

SHA1
330c391b8218e7462af608f5482ae1a7e15e6fbc

SHA256
c47b2961b3f8f01a75cc8b15b23789a569282cde0723b8c456670f4de787d000

SHA512
edb0bc5dd24ddfed6fa5f8e0e06be5759dcdfad3038d4933316d494592309621e1fc1f71e96c88b1721408b2865606f098f52b123202e5faa1fc82801ec2ee80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
91264df7cd2f00cf64efe75dc59cb9b4

SHA1
cc395f6fd7855c27f12be541776e45e7272180f5

SHA256
ce4ccc0fd1d4a1e8b4e9afbdc17870661c12b2946d4e17cc6131ff0d4991eb96

SHA512
d725e78273c4355b26399901a3d14ecbcb6e5a9c4edc77fce5544319cd1ec521be3207974df71dc4b62fcad159cae7dc94c9fd13fb20096ba1ab971c2c095a3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
affa6f1548dfd66052bafd6f7d944a02

SHA1
84eb656af69bd451e9359c29c6e269f2b39c757a

SHA256
b1106122d1b487792e931f2f46597da9fa9180f668f0418d624505056d2eb53c

SHA512
303de3dab9a2bcf702008a52537407385d41edb3d0df6bb1890a2ce37bf84ac4b5052721f354f4ad8d8b199e3ea591653cf9b19960d980b053bff700b84a47e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
069353743d9bce37adb36f89a4aa082f

SHA1
5a037e0a0459ad8b52f4fa7d24af76e3e75fcdd3

SHA256
29f651a4599291a1ac9adee241f3b2dbcc2139ecfdf3521a90a361b148e31620

SHA512
4f9b3b050e85e22090dadd6535a373e7e455caa3d3766d9d4e9e90fedb9771d2cfdf8397cc88d0fe0b8f5fc6a77bea919bcd7f86e1fe613ea1b1d47a1ba7662e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
b8e5628ff2c418e31035f025ddec036d

SHA1
a5c4086c0f7bd47abd15fd18037879c78f239f47

SHA256
8d405960f8d32835430f1ebd02062344958b18329f8f459751c67fa469797d7f

SHA512
58db168d478f5e42f73d437b28ea29eec14625b58f348dc2f282fbf6fbf8f1f336fd9b629c4539cf92e6480251f7168fdc86ec5f23b72bfc8bceb1ef4fa2cac9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
12KB

MD5
266aa77fce3d28f1db7399b575699693

SHA1
b613b56cf08e216e68a3848011be27bd96908a37

SHA256
f2f4b794ee8ba6720e39d1c649b753262c765401dbffb6bd75866299b8931940

SHA512
6209962c1e2ae3f7148e85fbd732815acd300db4fdfabc009d49dcfd7393052549441cfc6520f57e78ac4c389ff658b9d767bbdd9354c69299a3100a764807fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
6c38276e36c39a0945a8fa9c56f7c376

SHA1
0e801407cd471a0b12443506de2ac8288f6269cf

SHA256
75c088959a6e6a2bea8d6bc4c6a17e9eb127c87b6b80b226a424539e527d2a91

SHA512
9dd474e481c9a19a086939b4acdd60204f7f5177c29cc5f3ae11b261fb34323bb8a7b07e2e74fd6d4274e5cb2cb672f9d31dc4de422aa096efb15da2a17c9c4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
b7cb1cf03a0d5c19c214b1d57cf6640b

SHA1
160504ffec080f09db49f17507c9a2e5a8d50a58

SHA256
6e62271e2c02419a641a9ff9774637d72d3bcbc8bcf625d443ad9cb3f057ab0e

SHA512
40459d40a94660e13fc34cb8e8a571d7d1f0cd8cb8ccb0adb2d56bd90dd97ae7e9f1ea63dcaeab18d3722d3e9f4e3095bcc50ebac3eb406733a2e0ce03d7beb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
19KB

MD5
6219315031f01e47529fad6b6549e522

SHA1
3469e74fafcc681e98d619d0bbd4d7e9d55287ed

SHA256
09d87f0aaff4d33e6cd828f185f1ae1cc79c058e679bb94bac06bb86dd5dbfbd

SHA512
e81a7f1610a754a11c970e1bdc95089202edc5b2d65a7d7bf9614d1af5da5a4a22905dbe287b85833f8dbe9524198e289c4a0c741a03684e336b199b9c3adb75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
19KB

MD5
139fb63e38e9750d1067c019dca681eb

SHA1
de187bf37a2eb8a633f736b23f1066e11af9bc6f

SHA256
b58df15ed8b37ae95d77a96c209dc0a4ee43a193d125e64dc66e703d72d9d987

SHA512
a67ef923f2bdef4f1e2dae9217b7e56bf8cbc024a9e3b62955fed1715ce0ee8dc89988e862a655d3a8ee265a72543ddbb3a4535e463137e5fe3a9172fcf51f47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
0da45c100bb4b1ef809f841f5940e19d

SHA1
d57b32c681248a373a7d9a5c37f47c4658452c19

SHA256
977c0ba8984b4d072fdb1b45d80f9411e02c29f771976cb6b2096b6453fb07c3

SHA512
2ec062e5e8c0e6107aa7cce9bb3b36520f5336499ac50d3f899e87e97ae609bb04099c0ceb676093db97ea9fe6752dc97322d988b0a2b94586441edcaeaeba43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
c7d266ab127163da11a52cb3ceea4804

SHA1
4d483761d558dd4d854498d97f5e0c3a72110937

SHA256
eb40948303582627c77bf116663fddabcf6c9dc1333261f31306d2bc7fd00923

SHA512
60184df5dbff043adc917913a1132b6894093cdd9b6650025357c07b166436fc5e5e342cc6a65405b23222320038424b8737182c5a292846283e365dd6e86e60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
2230c5a2f7f9ecf75103321a7bbf3d93

SHA1
0708f40fbcff8bf7bad740a934afe7b5ea341928

SHA256
4e53ef26edb063f84baacb2b4e77f041f11cac733bbe3d25626dd699fe6a58db

SHA512
9cbe9873978d81b3a7f10026e92810a546c6e11c838ee06588c99f3ec564b1fbf3a321603b8b3834c0820401968a4d17d91f71b0d6b7448c75ef828a0360fd16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
7becaaf5d2e1f7ed9b80096495ddf89f

SHA1
78712c0d431616363c8570906def41a39d5bcae1

SHA256
59d30f1024f255bf3d21b83f3909bcdb587273ee1c395c94dc46bea4b781749c

SHA512
086688f590e3c56d7bc8fe651ebe7fc891be0c62fdd4f71ce1f8b9000443a6c14f15f4e698b02868460bc47959dbae4e6b7f30b800850bb205b6bd85ba24a9d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
efd1dca8508ccf6e7c50fba275cc8b4d

SHA1
52c32ffe77a515838b9be99fdcb1572d889d3f6a

SHA256
ab3092288938b853c66d56a83ed6e1b9f8758a824346979e01e121b154ac51f7

SHA512
e703a4468b8069d3f2363288a98bd027679feba6c93c62c1db16c8e5539f310fc6e0dcef0ec18dc71d7a73e52d984d4ce72508585b4f1817f1dc70c2753a15a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
ac494795ba9c9191cce27060fc27b3cf

SHA1
2c3cf32bbfaf98d68c4dab0ee73226a65bf2e2a8

SHA256
ee7b7dbea9cf0c0eb213363aad449a6fd71c1f31881881468300838b6f30bc7f

SHA512
0b69cad8ae24692cde3c70f3f22a5a1b6f7ebc4d388d33e26595615f10acbb43be3b18c0d23258384623da51cfef9c0e06f592d2717c964e001c05a7975a1661

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
84fa716b878e488f1c5eb24bcf2856dc

SHA1
877e6c6293c8607502cb2606652edc71a3e7d46b

SHA256
3d6672df7ae49625c3d50d732f61acb8fc9370ab43fcc51907bc778fcf44dad5

SHA512
12d876790d3b6cf5292ee694da4f963dc18d31401e57658588fc98982ba6108a3367013513705dc97ae03ed4fcadd90ebdd3a2b4414008f7a87863295fe7316e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
21429587fa1a10151e3c653682cee62c

SHA1
2f1eedad4c963da6ca65e9426a3fbd53703c55be

SHA256
6ea370ca5844105b3e9026ce60afb4ffeddbb73a46053965b6345adb57e2a872

SHA512
994483889774d456e615b51ff6ab1f9f0db50850480e8a53b9bf63fbff7c0f8f808bc306796c682e79b4498f6cb7b8230f8860d8a3771c9b4944b3f8eeada7de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
86cd373cd1a1a46df813959b60760c63

SHA1
5d4a5c50b5daa44734f028edf54425cbf229e586

SHA256
6ba41ca6549724128f1119811d61bb6f9f2e0bdc5926154e30a8461f02c044a0

SHA512
9ff70b0de06bd3c99416b66016749c6e12a435dcc168db41be971767fc9ca1dcaf145f6329da1660338994f50063b8b26bd4f8b60ede9e257c9c33c874d1ec6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
ccf6a98f74eefd49d7cdb75e5177ccbf

SHA1
db33aabdc5a20ab5c7bf3066225417803d4af669

SHA256
b2b88fffd8def20b19a83b890310a7e787e7c9d9558426e3b38ba01f802cb6ea

SHA512
57c484e049506cb73e8818e735d61b4822e4bf90de17d83dbdae6ec954ba0fa656cbbe23cc3042c55a0e89c2e84092c5fd8e17de77a14ade9779e28bb39fe45c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
3e318213c40666d97d0257b0f2949445

SHA1
7dff1111e32e8a24753b5216c307581aedbb65d8

SHA256
ff900674716e41e11f187116c3e51b64b226524b55825676cd633103ebe81473

SHA512
ffd4f7c397e0036c7066edbf3cf072d3e92809f6bc03e208b04cd14339c4dd5380fa26d14d9c80469c3488f2e3306fe6ca5e77e2ff6630f17be4b9e722890768

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
a16d7465208d242235671e72dba8f31a

SHA1
1ff7a3296bbafc2d66e835458c0e43ceab0bd578

SHA256
e1054e49b5bb2d1f7df6adb27f67f85d421c78a6b26909d3490baec10cc06c2e

SHA512
313f1d6f032630bb80dff991429da6f7fb67e3f0df6a579adf097fe9d31f8e1e205a636d5a9c3cf164c1ad4253f3bc06fae276c1ecbefd6081d2a42273124d54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
393c8ce5a16e57a20c81989a22785dca

SHA1
2c22f2d92b51ee2c5b08e41a741bdee3a487726d

SHA256
024e818c02baff890ee4ec3cad4e5b93ca7d448bfb59016b268a19f1be86de32

SHA512
1f4bbffe2fc6a0182c758680139566638d7020c2cdacf686eecd0be95a40d1cc39187cfbebf53517ce41b0365604880418c625b1cf5d6970f416a80780e10c97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
b2ebef1606eaeb588cccc1986ef19ad4

SHA1
ea87d265d6b402ca85d7b6f0b6f34f965f239af3

SHA256
a2d84710c6977bbf27dba60a3c10b0f7db39d61ca7ecdd0b9130bb3367ac2162

SHA512
b6af1d52fbb1924adc1f42ceee3fbdf6d5597975c0c729ed855840285c2d593478135980d2c2ff8f1fc98b7cdb4a36aedc758315822ba1b9a8b6bfd287a47fd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
a25e8dbe6af447b933c70871bd6a00f0

SHA1
9050607bf2c063f5aa98d02bfaf20c24bcc5b28a

SHA256
794f58c5a943aa5ee3086775a83c9d949a54003f5b001a4fa62a7d3b1761bf40

SHA512
296e996cff945f913b5008219be551e56706fc130e9bfa228f9fc716194ff2007cd232808ca6785dba1524fad22314a719a24f8ca284a6975faf427a95c0f90c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
310666b781b18439e2e6752bafcaa626

SHA1
2bbc786630b7b79d13d50784b1ef623c675e774f

SHA256
624ab169133b56f9aeb490bc29a8654a33962dd2cd4184ef2503556cb91340ad

SHA512
868e150ddcb360eec1a49da378d5474fcc9f4c6817261ddea8b359facf0ac7119a414805ef3efeb501f00635ecd762f3375d68d9f2d102a359d722340d0551e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
760531cf661c4d7017ba7e7b7b8c500b

SHA1
c65333feb5515d89ced8de5a6764b83e6c7ebc3b

SHA256
339734ee7b9eb2af9144c7539d3fdc1843f2aeb5cc8e39070a08a3da1ea8dca6

SHA512
33637b4a31f40fcc2a1d08145e37bd12f988c03501b99765209dffd0714505375b3056511356fa1c0a47a68419d5b16e12c1431e7cf0c7249c956b3b34fd58ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
d64c92649217bd62453b9c289b439e1f

SHA1
395d03a90e47745d4e5eb4a0ae151ee2c3cd7656

SHA256
f79218ab22bb4a253f8359b7b6e50dad771406267628101ffeb24569275a7baa

SHA512
a30838db3a1031feb78c1ce51c0cff9e3cd6d9dab66eecc6649012125a65faa2b498b78baf2ca391a2c8a0c275131ef3170eaf4916f510df687651c7e74aa3c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
3baa81c6a586f2385ff4f05a39cd91ad

SHA1
d346f8bc59b20a592500626a7d10f25ad837d5a0

SHA256
8c8fd2d7a1d36c9fa3e98a1e39858feaf76075a65c16a5b7ffc228804cbf820d

SHA512
b1d002771a4fa84babe2f336f84584dc08d4f61b895c54fb43d7eadc10d8d45f439b0f4beb59b6ae5f9f23ad8b9d8248509a35e554b9c5f7ca9dbcf565c1d9d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
0938c1698be400c30b91d81be3a950d6

SHA1
4a1cd2ea9b9121c0d16bcdc1660f5a06c7a6fa54

SHA256
e60314bf79b630f9384b14ce594e281d891e5e5a381bb91958af0a0038175a20

SHA512
29e625e2ae9a3eae4f5ce6dced240bda93e0759101fbda46868cfbaf9965d929313c44ca3bc2e655ad425bd92684a3100b21503782171481a84d9fe45bff4c51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
30ff8b20b1f5ead92d1fe7d9a3caca29

SHA1
e9547ca725ac7c9cabfa1487f975ddeee2e20774

SHA256
8f56e6cd6b2dd04c6712d10de571fd1b29e50459cede22c7f28a2f94ef1629a3

SHA512
f328d64ee6c9ee757dc34ea133b49e0a786671780ffaf1fbe905d23e1e4e91c84db3c9c58b1e6490da8cbeff47b30c76ad69edee7272360d8ee59c76aca77525

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
7a95368c0a079c586b4f1c9b157c0a90

SHA1
c3bf693d7159292bb87cea441523613f70679f25

SHA256
a46f8780fbd0c79a044fb60af345f4fdb07cd6d37163a884b7942ac51999cfe5

SHA512
08dd7226b827f50d0ebcefb002645878cbfc180f8e873a631c32b2a8385fbf2a4bf11012fbb7cb6bc53a063bb2a4aafaa836172a192dbd92ef992aebc9af0320

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
f42929e635530e8bbf568649442cfed2

SHA1
7142bfab1cc0f299f138aaf7f1e1df16b7e0c5c0

SHA256
e730cd145b675c0d83bf3b4ce4cbb78a5d7eef3fc5821cffe2907308188db118

SHA512
36f6362832f6b7bb3cb9f05cb85821cb848d0201e0ffdaaeff660674f8298bd7fe38119742fe77ffb6653be24a590fe54fb329076547ee2c441c269b89a05b4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
5b9a3cdcf78a4fe054e90e08a2c011d4

SHA1
fc93a41e398708358af5c88bf58d4b30a7b8c222

SHA256
790946167ee605dd7540e26b6e8e55943534e62878ab5ec1a244d2b006e99ebc

SHA512
fe458e9e1bed3e3681cd6e850d67804ba41e211dca26462c6886cc4a21caec50205a3a8963ffc5be97b14518c7a1ef72b901bf1a571f9ca644c18a041ba8ba5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
4b50d7d1bc910e314cb45fa343679caa

SHA1
decc1c630a4e8aa66d1dcd3bf7c81c2dcb3fac26

SHA256
96918371628f090128ed014334b8305df849705c709f9b706dda59d08f35cbc3

SHA512
c958567fd1d249a46b5cbcec5c74dc320e468dc2f192506f780e9d2d8b09aa672bb031db535e1a85a7c388c57d1fe60a296cc8197f668c896b8a89bfb7267aad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
19KB

MD5
af97e40355c7db63c7216fcccc07775d

SHA1
191b3c29f72d9355631d77e991b4094211e73aba

SHA256
82c81ed9a1432c4c87aadab0e54fde7ff768a0ae9ad8fcea46ad385be179b083

SHA512
1ad28e512944d01b3acb5168baf21eae056f0956ac287485dacc896c5ab9521ea50fe8973a3040ee8972d720d591277bfca338ce56cbd6350222a687f424c3e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
6b6871ba4652b9bbe287df26a15d5137

SHA1
d04366d574a5c87b5eb917441c388eabdb3065a0

SHA256
ff3e45e5701c1aa356b75f13832e40b66838e94ed1abbfb07c7ef64133b6fdb2

SHA512
4cff56a30fd5c8904692cb195f8569ecb12f3de7ef68ba079f2b2a345acb356edf3387ab4a906e033746a76cda88900aaf7744d5c36af24c3e07c067b1dc11ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
c9315b5b1f0c19386241c6b5822268e0

SHA1
5f9e09cebdf612103fad8cf836ef8ba079d39e3b

SHA256
72f1d5583787e2c268a79bb42f2cc034a7a83f733e39dbb0176102ac050ac25f

SHA512
77bdbe503028e7fc93d202097cfc73fcbb196fe59610ea1d833ecc5a5cb8bfac4ec7f49ad8a233561a47cb7280cf35084c7d2a0b57a11fe926d8f1920ffe6835

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
313c2a9835374a9d16b993e43af178ec

SHA1
f30c9925aa209f8bc58680753afd4884f6d5e5d4

SHA256
b75a844907501c7dab122a9b9a2aba9ec33b585c48911691f371dba16136baab

SHA512
a59b9b44bcbed7775d5af0c1d13d04b347df951add3139394ab8cb631fb9d0600631ae052f1360f4526f4c6f51e762a5bf8ef77638138ea9cb4cd7688b2c572c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
3a66f55cf5082ce894f23d3e7409be40

SHA1
74603f5c2fb08c9136a37eaca53c6d4379f3a9a1

SHA256
1d76dd2a9b1c2d68fa0ddc9004635aad77dab115439adcec40187085c978e0d4

SHA512
ac4ad1b65caaff4065cdccafe3beb03703079de9163cb695839862b92d0bf3cba5e3468389c7e14a7a7babe6ec6d03936c94bf003c36631744045459dc6241e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
d6248ef60c31a94005f1b82a238b5226

SHA1
78014d9e0495151e702a1004e17d28d2df794454

SHA256
bc2f0a7e9fef10c461334a5bbdf87ca105f162cabe013deff55d479057ec5e81

SHA512
35f0b49cbdf04f48dd90d6e0038665a896b6e47b01f68dc81a3a8d09f93144d54b97c334162da34ec7719683beb21d36473a16927da173ee76418a5b8bcc895a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
8ac1c68a5ffc9cc4da60f201e25800b3

SHA1
e189e465b1425b7e3613caea4aa984bd5bb422d3

SHA256
584d42347eec5259eee95d0ef6e53bad4f5c22013f138517d555130f31d4ab98

SHA512
e37e0ff957bacbaf33c77ffd7380dcd1d11d1112c0ea2e3bc8c04f8b8727cd80f087e8fd13dcafaebd7e9a95c5dfc23c33eb2c728dda0360e2de25b5e06f395b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
3d5b281988813cf03d2267a261e9c903

SHA1
3806293ecb4bce67eecbfb8e2c8d32db63821a88

SHA256
62a338bd8c89974ab6e418bd7ead7a8a46c3e72d64431197161a5e5a4531552a

SHA512
ce25f4d50c21d1ffae0e2d4ac805b8b112f7eb7393419d5d3abc48add566b1a71bdfd0d7735f3cfa2a24d6b3fe415b25c0dd30020826261ed39f2264f8b3794c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
3fa708126c47a785a046709af54a0561

SHA1
626a5d48b995c7817d823cf4bfde7c7ea61ba3c4

SHA256
24a38df25a1ffdd71cc7ee45aaca4d38be4a67621d29bbcadd152daf837c6c7b

SHA512
fd3a7794977cdf691e0482e813cb7a1d22077b9ec52e7621bfa390a9f36411b61080938d4540af03f72986894fd35af21d36fe3d5fcafd979a63fe2139a17b80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
da8a1ce8dce8b084f10d5b627d097b2c

SHA1
3e3d96cc82a4d63e4ff35cd8bb913bacfdab7f02

SHA256
fff6c02796a0448f92db9770986a65e01ee4905644a27237728f566f7b2149f2

SHA512
1f4f6a0cce2c0b4d3aab41883a99cead0d5677bed1e521bbcb584d7e3ca6961c343be5ba982a21f38408c757e52da04c3b50bceb0a133a8dab9f5d0468b5c0b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
3d7489d781dda39652855659d77119a9

SHA1
2be1d05e6ff9874b01e7a8af16ba393f88872314

SHA256
94db186cdc673a41a1c39e61c53e8ede460b99b12a323aa885ba8f9cb174d6d1

SHA512
8ba71c96872998657e731130ac02ec77ed4d1cdfe538aae20f59d2e57c8790bb873945e9c49b122abb50341059e35a43f5c98dc37c5ceafa8f5e5fcf065a3bf0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
24KB

MD5
60b345592703258c513cb5fc34a2f835

SHA1
39991bd7ea37e2fc394be3b253ef96ce04088a6d

SHA256
7e358b4f7553c9385e8eb2c5692d426bc257bbd4c0213e6c69294459734f6300

SHA512
0346fb4096eb285ab0fdf7e7ec38c4daf7bbb0c506f09975eb2290121d169a34c886fca342c3e06371cb697f2753a697ca4f72af7817ed340eee6063897110a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8202608b-fde1-41b4-a359-bb6b23047a6c\index
Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
13d08828296a3066dacaf5f035478e1a

SHA1
2ee7629f9ec00f05d47eb75b1e76a59799b4aadb

SHA256
a4d38c6c4efaa64d1ea3749fa07056091ba801c7e69812114592dd07fcd980b1

SHA512
4cf5421b08ec05b49cd2f52bb96b73e152e077bb0de82ebb565a6bdeefff11eae84a632db8770725042e421bced943f864dee9366770bd4b49fb0dc3b77c1f8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
9930376e6f73975817535576e6722e23

SHA1
736fe16f304e110884d8d53551dc55eb3b13c0f3

SHA256
12e2e9dfad52049b34ebe457f30ffad3a433a015d752bf0675aa46e449e16d5d

SHA512
dbb9a100ac80c583b062decc9ba9e8c5914c835c65f59154eabfdeb5171172b6fe5ccd64a24918a9bba24cf81732ad2cbf1e7de39059712612bc041d48930930

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
f33a7680da3eab38c62e962cd662b094

SHA1
c260938224f566d7d0e45f3dd51f10ec9235fbe2

SHA256
aade9ab8ec1518d0987f5e45a876d2779b2f46729f58a9b844c59d882c338bf0

SHA512
a833b7b019cd79a767ebe0e23e025245dba5559a04b5ee15be3d698581bd134749d834aa34f089cf0730116dd08baaee2f5e9ea321f58a61fa2ad63b3e7addf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
54df720fa81794c7ffd8a2cbca4d0a91

SHA1
04bd914e3686e853b1e87bf2ac1ea717c7f1a05d

SHA256
f9e80566a25d46f321f1938f765b78175f53e54e780b2efbd50189831433d41f

SHA512
db408c07fa21da9350baa4b60976487efa0620d449dbfa681e48440363a2dd4b94de0ce7e9931c5548c54c8bc056563d5e3528b1c86d22586cef4bbf2eceed5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
9f746b40c971caead60fc2c07583dd91

SHA1
867bb5283ea0cd39f81c647e2c268c490d22cc27

SHA256
9dc5d27da4438843746ea65d2257ec25f6699e04a1a4f2253502d8c48d61b4e2

SHA512
e2a6981cca9c7df9ae82c15b39646a9b671f071193d2eb066dd41fe2f340cece7b28ee972f37e5becc4d9975872f9383b7ebe66a13176daccc839fc907ae63f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
34c9f20c0eb969365def85fa4517523f

SHA1
4f7c79ae27b7c1938337c4f9c2b778f7480563a0

SHA256
b8d650bd2cba7ce1eee64114c8b1cd7e0366465363263853f0e5bdf6fbf8f6be

SHA512
66ec8362b28559d854bad40d2324452d864480b48d2d3cff3e8e4c235a91d7d914bfdcb836c64f6eb534bc4db1d3f57a3af969cd0204b3a6ca71ccd89b70b5d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
8b10ab4c4d305111819443b82034ad69

SHA1
97f71c4742a137769e7ab0a08d58ca4b345b0c09

SHA256
d3eae887b8d9e98edfff95aea25a1872078b32aabd718c3a963a1e5f114a9835

SHA512
b48f596fdce62b1dadea0a8a1d60dc8a75166cfad3f705998aedc435c7ca0ac969ab19a69bc76a7b0bb22de57bc11a9780fcbfadb8161b91c42352b7ac9cd544

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
83B

MD5
2279d93d4d3c674d29645c4ed24fdc76

SHA1
deb5b83af56eed5e0fb22583dbc1bd2ea2aa1557

SHA256
82601a70e56e895381289d4279037df91523c8466ee99807a4978dd4c774b824

SHA512
1f00acb7ed2954456a68ed6b31fc68e201d676053958a0d47732488e6159343fad22e00e5e7cfcb4036e87c5311493d6f7970aa983da8f9aed6fbdc0840380c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
83B

MD5
1f6cf83c84773051f9bc4e1476573ecb

SHA1
546e339b6a6dcfc570196ed1f287ad7fedd0bf49

SHA256
c947843693038ff3fe1e47b228a6ab34c23c17f7e20f3eb8833348759353eefe

SHA512
6e67dbc1d285b7b4fbeb322ae9114c552eef0b5cc25e5e3eb577b2c144658d21374c512ca36a1e4ab0719d35e8cc3d62f86bdeac86a7d7fc87a1348c3e782655

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
bbd826371c00043ad390d8fdb78bad86

SHA1
b9e29342794580e0466b9a64080cc017abc20544

SHA256
9c5627b3839346df63115df019b7563ca883ea062034535ab753f5111f60dabc

SHA512
ef1e59df51f9e75ed48440e748c7e563ba844e68063f632aa65044c977416bb05a75f4e903141f4aa35e5883e5198bf403b4a6a87ccc86b0a0a8b64391aacb99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
204B

MD5
ef9e6ff0c8e3f35f555f50c065e911aa

SHA1
b7bcb8858c5d2f2e501fc1b0362cb5fc1ea036aa

SHA256
fe5bec61b0f56630e9380f4658b429ef83dc27821c08b8596a1f67f7f9249450

SHA512
961d5dc86b9b804deec47173c4ff84aa1959aa13d40a1f87c94667f0115ca39107c6738a5d8ec871ea6fc08847f9c26fb1971b0877284adf997d0c998e12722d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
2936450b41fe84dee1f8f704c3fd61fd

SHA1
f74593d4de5ce91f6dff7b1b298c2f680cc7c44b

SHA256
999d951a72fef722ffa9a00e28b06cf2a90ee979f1aef25d6c27854da06527e6

SHA512
3d066dd603f1a95d8809a25b205f4e72e72f456232c38d3a93f8570924bbf3ab05c5e67fe677a016809b70f809e375ec3c5e148e00e10bfb43e54d634b13c922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
384541ac5b87e407653895415078477d

SHA1
b149270c990d12323e6f0b4a07d4105533cedc4d

SHA256
6835004c08c49abe955148f9d22f28ff10a0403428ba185a96fcb3f8e21861db

SHA512
06740f88ce262231f953ae7ee01aff62a46af8e01607b798f21a97cfab70d935e936a30569695fbf26235a874385d46cd80a8a425086a1c9b3a2514ff90d973a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
a41c36a66bf370d6862e5e9c44b3a803

SHA1
1015431a16230512e5a6a7a16c097c4d1bb70ac3

SHA256
8a833f9f8adb05946ee08f84de25d3f5b9bcb2e7bd27fd97678addf611e79150

SHA512
d7e1a74637882bee0b960191c4956ce5dccd0c99c2514178f962ccc3bcb65fe4e9931984d9c2a12f4d9a46e4b349b841f44b03ea80f5d1e53b687e08798d03b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
4KB

MD5
e54d48fee762147274dfbb2ee3e43a79

SHA1
395380e7af5deb4e4b1ef10ee4b33652bc8d9f24

SHA256
98cb12766c4ffccc0b50005a083a435afa9a392c0a52609110db6f9514d9fdcb

SHA512
e82c9876d4bce5fa66bfb8499da2358f9d7ec1944f5211951fec004010accaceab5f15ec9c19d61bf4dfd6a372c7bdb82c6938d814ba216ce604b46806e58868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
33ff475975441842d9b4e4ef088bce14

SHA1
baae260c991149806a9543949accb08b9225a356

SHA256
99c1bb7cf27d6aad4efe1750c0838ca7ac824fa142c8337f9141b81bf24c2e73

SHA512
2d3ccc5aec2d4694df58b715c23fc8b846a9bdde998131d8ee4da95cad9c0c18e3482176981a8a16e1b9256b2b6d8410f821c721152ad6ccf07bd8067b130f39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
937c3ead9d15095c16c95a29fa401cc9

SHA1
32ac9531a28513f73bb29d6d7a790ee22fde6b02

SHA256
fee7535a850e43d3820365a79257e41bc26a85b08e659901fb2b44b84fcbe2c8

SHA512
856cdf886b6041637c9b4d0bf103e413de2e3167d58cda070a33df61093706b64ee562e279ccdcdf9086cb464ffa8a7592d8b7cd3ec710418bf53a181df25897

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
b2b89b102311979a361da390ccfc1480

SHA1
668d3b67b31d6551963486c613a59b4433b499c6

SHA256
243f7faa8d5a8a3c7341e83b67cce2292f84c5efb2e2d27bedae2331b01bf57e

SHA512
ac8d10ae72be0c24905d9adef13438b1df5571d2d165dd80aa04b18bc265ca8876343dcb02a09db7014d3db4e5bb0276685558beeac95625fc1e42c8ab5cb698

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
faab1cf3eb5798b2759eea86781d135d

SHA1
e1bc42c6daedb89f78836805ba1fb2705d262e22

SHA256
77cf2647109c1c1a692afbb91a3cd5c00eb289a57a72c5e02e1d535f6856a773

SHA512
92f0a1c8e3df80c6e4a730d5453fb45b3cd7cf9ddfcbd3ede30ae28e6c0c2d252aac37e0103064548339d9066c38b51fd1314f2ff8747b6b9cb72aca0ff64f37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
aa3528dc8e5c888e673e2f563dc70ecb

SHA1
5cf0ed76b989de00b713695130ed35ebc20a50f9

SHA256
da72c9ee99a56233bf30255be8e6adef9620ee81923e28051454bb36eb826cf5

SHA512
be5ccaefd728cfa7097d5c6112e43381efd27dbb36a29efee44f1e8c75924f3b27932425fc68dc2629a97bfa27aae9b1f43fd880369c79975b22ed3738b8fc96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
4210ec5e9ce2103baf94a023b255a344

SHA1
368c1340d3635cef24b010f97644470528475410

SHA256
da288c2a2c1d39e061d89f1657d49b817ce78352fe617251a6cd471751cb1dea

SHA512
e4bd6a8e57e7a33c2286f600d9835ebe034210d06cc282a9b796371fd55216261f2667feb3bc636a4d3a60a0cb7f5551c7f0e55c850455271e211a71984d0e1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
da03350b3dcd42eca420406c3edff431

SHA1
f598a52a539a719ae2f0986e1f8d9026a3e12d34

SHA256
6a8dea158afb0792e3dfd440bb322e6d73906b51dc1956312f9f7821099fdb1e

SHA512
58bf18980d85cae698e0a4f0823d0fe4b0b64df69088d1559b4854d9892508189760e310e1d943882e40cc3eda74cb0b6659423db6615eb4e44f5685568c1dd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
7253b9433c51eab5c172b8908dd4f78b

SHA1
e1efcdef1cce05e52ba4e4cf18356e86b9cc2c41

SHA256
400f109a9376933aad4507dbe7305e0fe8f713624aacb1e2caf4735699c31906

SHA512
80cd7a9eeec9cb33d8d917afae790cf28339a95e8b91269d2b39e1ab397235c9e15cf376a5a7f9205bc39c2feabd49ff06de69d782b01c874d5aa895828e49ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
54cbf783fd67049e1ab7174124c812ff

SHA1
40e8ad9cfdda4e7d77ae1061fe742ae3f3a940c4

SHA256
e889828847f3c6dcd059187b62fc2c9ed550223645bd57818393e5e7dd22b2dd

SHA512
545ab97b12960cde3519af9cf7406e30da50782a185fd52050c8e5d9df7cb19cd91fb6437fd8b7d00cc23b231ff06035141e8b60e9585877cab188574074df32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
116cf80be743758f93585684173a9100

SHA1
0c2e1e51ab895956e7e9337e5e60392affd779e2

SHA256
e8c70c9af36c3380cb181946dbc405f408c7e6945d7c04dd865633976822d969

SHA512
0367fb70684c6cfd88ac0f12970ca84a8dc7dfe8e183e7096191f0779e7b9d5ab5cf94d71bc4ee55d1a9bd0d0ba4e0c6800d4c4e16a59e2847fbdc28365e4ab4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
2b9fe510694cd6937ed9b616cee53fdb

SHA1
5325981e858cc3d01edbaae99c164e4be4c7dc04

SHA256
e3e0a7b263fb3d21feed783a1a41c02a1ff9bddc6a62720b6e3ef5ff2fddeef2

SHA512
eca980adc0a261a4d6ef7f54093ffca168c1f4d453f229b6d40803ae40ad5399383f08f2defa016677f1d424c4e206f3445be458552095688809193c47b393e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
514e371c704d597264f0912051dbea8b

SHA1
8d3d5f32b10cdfacb6c5f51f04166c4ab21b4cbb

SHA256
cb7b7b13444c455dd0680e285acfb46faa92a3a5fff4dbfa81f0ecf607e18ddc

SHA512
b6e4572bb31bce1fcdb1257086427fd1224c1e964762d198540855eb863e47c175422fc38a3a50edde5db54dc1aacca24da1cc70336fcd403065b5841fa7cc36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
9a0ac0c040184d174b5b19fe07e4a94a

SHA1
0bc499e1516763749d6dff348ac4cc7fddd3c3dc

SHA256
0f20a514332d00d96039d69a343160d5daf459da771f57718c35a34c98705238

SHA512
fdcfd4ffd423a86e9f02a6a8edc2e24d6abc69b29cfaf958ddecad01c5782c81383697a414437d1bbf078d7afe56b9c9d112ed11403ac5e6bcc379f459b9b224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
a100bf8562247375db228b7f2856e9f5

SHA1
ba021b939dd85ea9e736269d53066dbbdd03d663

SHA256
7bfcade003a06d7204aba771719e61f2d051d1feb5cb0298ff8233ff7da40eab

SHA512
19cf007958dd0ae80efd5d72e914a9fb786710479631f0c88c296e3a2c8d945636282a53305976c4c4add527c49bd419db54d5cebb4b11d32e40ed01bb8176f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
622ca8e82ee7b367254ef754aebd848f

SHA1
1068da7dff68c2826ba681b5199549fb747799f0

SHA256
28cacb2d5f94b1ed39c8de58b97fcaefb12eefd4618790bd1660bf104a042415

SHA512
2c6bd9cf0fc7d481084a487532079abe1706221cb244619c02574f13f3e52930d8d19edece194293fb0286485210082e4e4d7cd227245c6068d47a0de1be9aa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
9515c5af603e752fce4661817571541a

SHA1
c92162cc573a0552936b8a897a1f8110735f45d1

SHA256
ed33ed8cf592fe466c65ad2b23fdefd7804ed526c3db9390bb6bcfe0df5db160

SHA512
fb21dcda6a1d3f578e5f7bbeac35aedaafce1e1c6aa29be96eb6dd232df4ea2605929cc29e66846e77d3b44ace785a7fc93a5da7a9b1997452310069dc8d74dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
f1efa6a21e17ea13668ed00c5f2c5fa5

SHA1
804db1554be8ab26a4260cc3b9c7654b51f71b52

SHA256
d806f24d1bebdd81dbb638724390b679421a895ddd8cdb94f7aa44a02e24799d

SHA512
5aec5a78a683dd1d2236f28aabb02a980aa59ca95c19398f03115e241a7528b87ed1770dfe4ab07d3266881233838b9ecae98bf62d15a1e66eabec1d58811609

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
95513bc6572c7ef19acea59b19badac9

SHA1
ea37d8d1249eb5e5d569e5fe421cef2fa13f7a39

SHA256
2f9d57a207099291fa28c8a4a80a12781f01d9e8c1c009d36c2287868248df4d

SHA512
a4277d5ad244418e8ad31773661295c3f5c45e11dbbb779d8aed8ae85fdf7125d154dee4d3b6f9955b479eb154e26c879e55e9b9d320a109ea5db4c893542f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
1011a0d5659cc85e694ac2c9b742de2b

SHA1
ac08a18b8f4a3c051aa220993a4abaf52bff4dd2

SHA256
519406763a26a82bd31ca8ca0bcbebc044ff74ecc42655a77b72b188e1927b3a

SHA512
319b4c148457e53069503dd37aacd78b574c78d214e96cfb6544dbe0bd674bbd92f38e5f27e2c284a8ca0c21b238e8162ffe97b2ff8395e6d1e0275bc39893c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
fe5790c25b83f7dcf091a08e8c1b080a

SHA1
aa0f5d1bc3436d3695758ac78a0960fd2c61ada2

SHA256
75edad18085c8ca61e30c268cb4764ee88cd18cd7e8d74798472ff3b27f038ec

SHA512
9c8ec1ad46c16cd05c048b53aed28655e267c13a5fc456c396e7a21a294d80ef1270005357ced1aa74f1858e9f975b5d8eec59614465b8678115554493397196

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
f654cdc12664bd2b0325444b0fab1047

SHA1
1937c373b3a0f9312c6e1f0d7164bc352c08e7ae

SHA256
fde8487e53da8d55d971598bcf5edc70419cc3c64a056340eff59c4950582262

SHA512
17a7017f7419f4d216b48c76fd4e82fd3e7aa8d462891aff6687bb86114cc8fc1cb6185b768c76565ad2667d3dc3f640581b9972a7696050331586c05890d331

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
d716016615073319f9ca0bdd3e9169a3

SHA1
eacfcbd3855545576f7ebce2afb1e1e938e59bf5

SHA256
018377cadf84c684f08a70ed965b724cb71f5647b8db6a55a6e91f558af1b5a2

SHA512
669191ee093a502dc44e8dac505d6ee46ddf6fa40b1e815359debee8662b8dfc1822d1ef5d622069248154c2ef21da5955869b344a93897a56d410cdeea1d4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
5147b3b80b6217fa50bd29e63383c71d

SHA1
ecd84b0d63b2ae9711172bb325dcd6f8cb8bec27

SHA256
5dd6244a59d27a74ce2bce1d260e81ef86283db9cd35074180d01adcd84926e9

SHA512
ed9fb032219d9fd9b5060f9b889ca940e8e05fef6939ed7c684ff72a768de20aa82946ca855aa8117886290940942c7f1c63e709724a4fc81da5dadf4a6ea13e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
74fb798075fd75cdcbc80d5540291c6f

SHA1
63a27d85e9fb94ca17206410a44d74b36362b615

SHA256
455ede9e1c9f75776efb9f7b4f7a9c41e0b1c797357d3103240ce495fe12ec0b

SHA512
dc243b1662d6a96565d39ca18774050bd880b19365efa0d0954ea69cfce487f172c895e22a9ebe0ed65f6123c1aea18ea88b609b5e37215b85ef48680a09bf6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
93a1c6391f05128cc32fd8b2e564c233

SHA1
f256d4734ca499ff9596b5ef25ecddabab9ffa3f

SHA256
9efe595fea210c8f0e74ae05bf7a01d611a503818ac0c29483a997e37458967a

SHA512
c0fe4726a80dabcd793ab77c397cf6cf5c056eab26bf74f4cb2ede78356215c55c291760d0ac8d9b64e799f5e5219f6ebdf647e382917782663bab890983d582

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
9KB

MD5
0b0ea7eb4c11c2b3ac1e275b062073a3

SHA1
52ef20a29eed62949b691d71bd950dcd30005f81

SHA256
2833723f6a4090f09338b0777e10fc015df2136113e1c4409f1a91bfa2415c7d

SHA512
30de0e0c2079d72ec1ec7df5c232ca20c357f759b1b6b08160ffb3a666d9e9bba6430eb992fc52186a0baca09163cb3f655a75c4a193955d5761e4975bd0e56b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
cfc0ba9bf1ae3dddb61c5dacee8ed52c

SHA1
a0140d97d46ea109d72a99505fab67965e863dba

SHA256
a976da1a6f4303b6d076d753e9d728cc6c6dfdf8735bb3563bfe073b0a4c7549

SHA512
f4323c61f8d085984d6a8b68509201c76366098d785f2b1fe39d71cb72440d05997baa9fb2ccad0ac25006f87f9de4d893a5e101fb4a6e2a61f4349c8c005728

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
4452e7b1230ce2618426dc5a8c156b86

SHA1
03cbcf2d3d56e3ba0af196b6bd61f5f0cd913666

SHA256
0c82a920f1d442df739da64c389ccf60c3b66312164997c622e4ae775638dca3

SHA512
f2b5049a9004a286b670611508f7ebcc6d705bbf4c08a7016bb0af55f84e35703132d2d4b9e6d1391577deea200a48087c6d133391a128512ac326f2994e7c61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
66877156548966cb6d867c2847bc9c90

SHA1
6e89be5bd79c8b74fd59bc2a214f679091900ad8

SHA256
ff161a7b03625de86e8bc0c5176c155eace1f7ac787f0316987838503939409f

SHA512
ffc6fe4f8be3dfed816bc81b1bdb800b29ba5b700893faab04384b36e66d7b8c359a1085d3b18c0b6fb051e9d52e5b6ed5a17fafab69860a19ce4def28e31e72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
5507502ab4cdc13f552c6c2b819f79e4

SHA1
78e1b295d43f127602581e116e4d9ac75551b358

SHA256
bb305f2c17f3fd16d8a247adeb4c2ff2b7ab5a6ed9af4892f9ffc418bf9495f4

SHA512
87b491d1fe4d15e47fe133d4ae6590b416f4067f898b26ce2c6d48fde0a48269c0c9c4446e3e814a2a495739a737fcdaedc20691c428e9f1262f96031998112a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
c122f99d74f4e8a75f7d89ba501141ca

SHA1
565704c226ff7eb90236411de6193e3f3d78b3ff

SHA256
6fe9bec9b04f7af5610697c7d5a5d581915676581ce5a492d9000105e0232e59

SHA512
885d1f79ec8065693c43af14863e03653e1385f76f6f248707f4ab68d1a2c74460b62c8198d9da31177108b19ff83faa5a445be315fdb80811473f3b629e061b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
cf605ae576cb64e3727f5fe6400492bb

SHA1
cf92c825082ee36e1b8d8f5f4bb5c1d9873fc653

SHA256
76da811cf59bc8d69ef5f1cc43bc040cf1ebf4922f15a17829510db87023a24a

SHA512
6b44284c24168859eb8af03e1ac39c94bef3013d6a1ab540f96566a466712a6647a07d36593ac591e75d0de196bba1844900a692f3bdb7f7e091ca169b34bfcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
f7340b0dc3ccd577cccd5a2a784f4f70

SHA1
379e62e06bc9cef2390a439a344305fda20b079c

SHA256
ac8fcd19c3167e1b889766db7cf699d6eb6f80377f66b32b043eff7ddc4860f2

SHA512
8ae039848784efb75b04e8b4b8c018bf0aabd626de6feda8fc58a1a201ebd6403197463707e18174ed0c2bd8fe8448114db517a6cd2eee7a358e82a853c93653

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
f7e057a7577596048779c79b0be9520c

SHA1
419b7a0defdf39d6b777c527cf34683751a45913

SHA256
b5efc840bec54af7104ff26221216af166447b1529c00a8c86aec767553c8a0d

SHA512
47d08df6135b585122f09881d592aed515d4aafa7e72702b556d69192969d9cf811503317a6cb1bee8e99aaba0beadf1188edacd641b275fef44b465a5d017b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
62ae2d965e7a99e6a801a171efd4db12

SHA1
dae69e98d0c31b044657611854850937136a95b2

SHA256
dc30f8a39de19cf98b65b34dd949c49c7dc6f7f8aa3774094c0df1d703d66633

SHA512
6578823af470dae6fda089ba197b33f15d01293fe0bf63877027bd4fc0a2d82f1548ccb91b909c671518e8ff072b19595084b6a4cfedc41f509438136935d4cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
254c5b428cc3c1b48573375e88226c79

SHA1
ca74bf1f278ccda1cc479af3cc565dec658189fa

SHA256
397e6bff3af2b03df713d45f493cd080059d15b43c9c2c8aaf93d466da68afed

SHA512
14573d08f83a189326b88547a074c619ed423fadcab55420757fbb6fa577d7618567b0f6247df000f3b88e610aac5bec657062f09e9605c83a3032760ffda45d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
8a858e9dc5bc7597d7c2b08d4b6edd06

SHA1
5ed7ffd88a68e0705d89db3b5a5084fcddfd922d

SHA256
2f32c18684953f0beb4ae8d28c2c637c9d24dc82574b961fbf82d9c4ca77a870

SHA512
a1a9ad2647107c37d3458e7701a38979b3f2e30590be0036922a5bb2b689e39a1be2ea832a684ededa5b3c79725cb494fadef3f82c28225739b8f27f8946ed45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
fa72cd56fa938707b46dbeb437e81ae6

SHA1
74a9c9a8cc8e52db08c44eefcf5f90aa8b4389dc

SHA256
9db6946d8d8b0ba3ce40aa07900626f0bb7bb23e14f7328faae6b9f6553a1308

SHA512
e35e879909580daff36f6ac43525f9239d6e5ab66183874efeb4058c714a3b74531607e2386343f4d21d4f9a00fc52de0af4793849c9fee73778fdcbcf819286

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
c86f300b8bc77de62b0bebdf4473b172

SHA1
7f35b0a5fc8374b6b2f2f9cc9879c857483ef7fb

SHA256
9681fec15cf0880cff9a137d7db98fce0120950b86e8dec0306c66fe38ac8763

SHA512
b4492e135e23668ada13800fd3bc4cc16298ac90d1cea573d120a80a4e851a0f98d73e78c9c229720d470dbe7aabb204c80c75be1da2187afaf06d063146e418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
e6e2640da619cf41289328bae854f83d

SHA1
2653f2945aa818020734f299f0e5e4b8a75c5f51

SHA256
d1e3edfed6eb69ca144c6c2918e70e35fb31218d126543d4854b7e7465e02ce6

SHA512
1bbc65e75b80c30b34b4ccff6231a408736dec7c8441c2bdfa7f9360ff1042c3af89a390da9e693d45f71a4df48fd790222d42693e3c5ac892ac8e90cc68e349

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
9f8319455635ece57b1a65adce7d0a60

SHA1
59fac0774b303869ad625dcb685f581608ab1d88

SHA256
0f050ae0a179a617ce9c3ce99245262f1f50388bfd85f4e8ea3a39e3807ef9d5

SHA512
0d72d85444d86bd0f290a00b2651c53a5c62d3e064f43f774770b0f5edbdcc82dff2a404584d4ffde20807989faf7df86211112ed48c57dca98fade6aa936609

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
f1184318acfeec693fedc9c3297355db

SHA1
18b5b4f543eb3da5e61d81de2cf96152a477af74

SHA256
4c63319872eef036d7625b5383409af89a9f497a307c485b2d9e92b39ee76452

SHA512
2c28e676748f6514f7fb5453de42bf7cc6972696fd9f6f208cc0474915047d1b48379c0b16f24ccaec28799fcdc7f77779d3a3c1bed529f9850a736084ade719

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
0307db2b26d962be2a9c9c5613661212

SHA1
05106a1b57d5bdfa40fc19431e5de51985f04a91

SHA256
441aa15a0dc41b2586c1c0d28dcf84b72355d1eeac45c084b3d85fdc9c5f5cf5

SHA512
181779a9cdb5ad630358818a8642fabe7089475ac94e0eb8697c3f5746d92597e98d8acd03eb5ce4cce136d07c67174733cb36c873bf867f082ded91365f6393

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
95f5640746fa23f9453aa8586af41f88

SHA1
5abe9fb42cb91d44e0db659ca26e90b10be86313

SHA256
cc3b7552dc6325ca283735af061f574dd87c6435aff987863329e4197bba1152

SHA512
23eef81188d2234dd806a6c92db7f3596292f0ca75e6e204c3cf87a86878eaf0544465c5c5d4dfbc2f9a59904b4035e34822adfcbeb34a9da2884a045592a3ad

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
3KB

MD5
77d2060ae1a1e3410dac681fa925357f

SHA1
989d65d1ffb4d91ac654253059fa4a55a60e730f

SHA256
89c4a6fb589b68d95edb047f7b00fb6d39490a5716ebe7f76c4952bd047a7444

SHA512
777849b1d24d132609da468d78637072ccfa2213e7a4d7a986ff09572c9a8e95fe4a1ca1933723f5e749e53567e036e21b07072f64b787eaf59c096949c25912

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
3KB

MD5
a864befa18133b2af8851c6eca0740e9

SHA1
36d970869279965bcb528f7ccda343364c365953

SHA256
bcb8757280683a62710cb306ca6de28753ae4cab8f587bc7345f96f06a6d51c7

SHA512
177648ae414fc978919b9fdddd9b160c9f9a6ebc1be52b981a3f6e32653f56a7f6813e1bc3b45e3b23aa1b09e9b60c1f2a09b8b307ec62205d0cc8a71f1fb2d7

Download Submit
C:\Users\Admin\Downloads\MEMZ (1).exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ (1).exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\Users\Admin\Downloads\MEMZ.exe
Filesize
16KB

MD5
1d5ad9c8d3fee874d0feb8bfac220a11

SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Download Submit
C:\note.txt
Filesize
218B

MD5
afa6955439b8d516721231029fb9ca1b

SHA1
087a043cc123c0c0df2ffadcf8e71e3ac86bbae9

SHA256
8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270

SHA512
5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

Download Submit
\??\pipe\crashpad_2804_LGNOTGMYARIOTAQP
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/10112-4444-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4434-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4435-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4436-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4440-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4441-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4442-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4443-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4445-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download
memory/10112-4446-0x0000000005C00000-0x0000000005C01000-memory.dmp

Filesize
4KB

Download