734403a96fad68cb2ef2b340adddd9cadd5894007aac703dcdb4a4cb8326c538

Analysis

max time kernel
1202s
max time network
1211s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 21:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eeeeeeeeeeeeee/Malware_pack_2/Malware_pack_2/NavaShield/[email protected]
Size

9.7MB
MD5

1f13396fa59d38ebe76ccc587ccb11bb
SHA1

867adb3076c0d335b9bfa64594ef37a7e2c951ff
SHA256

83ecb875f87150a88f4c3d496eb3cb5388cd8bafdff4879884ececdbd1896e1d
SHA512

82ca2c781bdaa6980f365d1eedb0af5ac5a80842f6edc28a23a5b9ea7b6feec5cd37d54bd08d9281c9ca534ed0047e1e234873b06c7d2b6fe23a7b88a4394fdc
SSDEEP

196608:CtbTP1ErBwMQjd1YTHdmpCP2PVgP/acIE/xQ0zyZejVk+YzbRdTZ:C1E1+dYx6OP9hdyZwV4zd

Score

7^/10

discovery persistence

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

[email protected]NavaShield.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000\Control Panel\International\Geo\Nation	[email protected]
Key value queried	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000\Control Panel\International\Geo\Nation	NavaShield.exe

Executes dropped EXE 3 IoCs

Processes:

NavaShield.exeNavaBridge.exeNavaDebugger.exe

pid process

1000 NavaShield.exe
2208 NavaBridge.exe
2200 NavaDebugger.exe

Loads dropped DLL 12 IoCs

Processes:

NavaShield.exeNavaBridge.exeNavaDebugger.exe

pid	process
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
2208	NavaBridge.exe
2208	NavaBridge.exe
2208	NavaBridge.exe
2208	NavaBridge.exe
2208	NavaBridge.exe
2200	NavaDebugger.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

[email protected]

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NavaShield = "c:\\Nava Labs\\Nava Shield\\navashield.exe"	[email protected]

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

NavaShield.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	NavaShield.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	NavaShield.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 10 IoCs

Processes:

OpenWith.exeNavaDebugger.exeOpenWith.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	NavaDebugger.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	NavaDebugger.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202	NavaDebugger.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	NavaDebugger.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	NavaDebugger.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings	NavaDebugger.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	NavaDebugger.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

NavaDebugger.exe

pid	process
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

NavaShield.exeNavaDebugger.exe

pid process

1000 NavaShield.exe
2200 NavaDebugger.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

msedge.exe

pid	process
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

AUDIODG.EXEsvchost.exe

description pid process

Token: 33 4836 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 4836 AUDIODG.EXE
Token: SeManageVolumePrivilege 3352 svchost.exe

description	pid	process
Token: 33	4836	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4836	AUDIODG.EXE
Token: SeManageVolumePrivilege	3352	svchost.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

NavaShield.exemsedge.exeNavaDebugger.exe

pid	process
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

NavaShield.exemsedge.exeNavaDebugger.exe

pid	process
1000	NavaShield.exe
1000	NavaShield.exe
1000	NavaShield.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe
2200	NavaDebugger.exe

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

OpenWith.exeOpenWith.exeOpenWith.exe

pid process

3028 OpenWith.exe
5816 OpenWith.exe
3504 OpenWith.exe

pid	process
3028	OpenWith.exe
5816	OpenWith.exe
3504	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

[email protected]NavaShield.exeNavaDebugger.exemsedge.exe

description	pid	process	target process
PID 4356 wrote to memory of 1000	4356	[email protected]	NavaShield.exe
PID 4356 wrote to memory of 1000	4356	[email protected]	NavaShield.exe
PID 4356 wrote to memory of 1000	4356	[email protected]	NavaShield.exe
PID 1000 wrote to memory of 2208	1000	NavaShield.exe	NavaBridge.exe
PID 1000 wrote to memory of 2208	1000	NavaShield.exe	NavaBridge.exe
PID 1000 wrote to memory of 2208	1000	NavaShield.exe	NavaBridge.exe
PID 1000 wrote to memory of 2200	1000	NavaShield.exe	NavaDebugger.exe
PID 1000 wrote to memory of 2200	1000	NavaShield.exe	NavaDebugger.exe
PID 1000 wrote to memory of 2200	1000	NavaShield.exe	NavaDebugger.exe
PID 2200 wrote to memory of 4980	2200	NavaDebugger.exe	msedge.exe
PID 2200 wrote to memory of 4980	2200	NavaDebugger.exe	msedge.exe
PID 4980 wrote to memory of 2884	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 2884	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 3252	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 184	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 184	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe
PID 4980 wrote to memory of 4140	4980	msedge.exe	msedge.exe

C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\NavaShield\[email protected]
"C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\NavaShield\[email protected]"
1⤵
- Checks computer location settings
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:4356
- C:\Nava Labs\Nava Shield\NavaShield.exe
  "C:\Nava Labs\Nava Shield\NavaShield.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:1000
- - C:\Nava Labs\Nava Shield\NavaBridge.exe
    "C:\Nava Labs\Nava Shield\NavaBridge.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2208
- - C:\Nava Labs\Nava Shield\NavaDebugger.exe
    "C:\Nava Labs\Nava Shield\NavaDebugger.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:2200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.analsexlessons.com/
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:4980
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:2884
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
        5⤵
        
        PID:3252
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
        5⤵
        
        PID:184
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8
        5⤵
        
        PID:4140
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
        5⤵
        
        PID:4052
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
        5⤵
        
        PID:3872
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3916 /prefetch:1
        5⤵
        
        PID:2144
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
        5⤵
        
        PID:3572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
        5⤵
        
        PID:2476
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
        5⤵
        
        PID:876
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4052 /prefetch:1
        5⤵
        
        PID:2928
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4028 /prefetch:1
        5⤵
        
        PID:4308
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3920 /prefetch:1
        5⤵
        
        PID:4808
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3904 /prefetch:1
        5⤵
        
        PID:4100
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1
        5⤵
        
        PID:3604
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
        5⤵
        
        PID:4720
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:1
        5⤵
        
        PID:4848
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
        5⤵
        
        PID:1984
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
        5⤵
        
        PID:3676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
        5⤵
        
        PID:3260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1256 /prefetch:1
        5⤵
        
        PID:5040
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
        5⤵
        
        PID:4688
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
        5⤵
        
        PID:1248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6084 /prefetch:2
        5⤵
        
        PID:4348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4016 /prefetch:1
        5⤵
        
        PID:4328
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1
        5⤵
        
        PID:2488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
        5⤵
        
        PID:2764
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
        5⤵
        
        PID:3804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
        5⤵
        
        PID:1836
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
        5⤵
        
        PID:1548
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
        5⤵
        
        PID:2064
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
        5⤵
        
        PID:3404
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1
        5⤵
        
        PID:2412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1
        5⤵
        
        PID:1936
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
        5⤵
        
        PID:1172
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
        5⤵
        
        PID:2780
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6440 /prefetch:1
        5⤵
        
        PID:1100
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6732 /prefetch:1
        5⤵
        
        PID:2812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7196 /prefetch:1
        5⤵
        
        PID:3744
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6956 /prefetch:1
        5⤵
        
        PID:4916
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7484 /prefetch:1
        5⤵
        
        PID:5304
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7220 /prefetch:1
        5⤵
        
        PID:1932
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7652 /prefetch:1
        5⤵
        
        PID:5760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1
        5⤵
        
        PID:5516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7300 /prefetch:1
        5⤵
        
        PID:6032
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7768 /prefetch:1
        5⤵
        
        PID:464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7980 /prefetch:1
        5⤵
        
        PID:2160
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8228 /prefetch:1
        5⤵
        
        PID:5880
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8540 /prefetch:1
        5⤵
        
        PID:3340
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8896 /prefetch:1
        5⤵
        
        PID:3764
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8868 /prefetch:1
        5⤵
        
        PID:616
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9032 /prefetch:1
        5⤵
        
        PID:1320
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9040 /prefetch:1
        5⤵
        
        PID:4748
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
        5⤵
        
        PID:7080
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8868 /prefetch:1
        5⤵
        
        PID:7096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8780 /prefetch:1
        5⤵
        
        PID:6812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8516 /prefetch:1
        5⤵
        
        PID:6868
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
        5⤵
        
        PID:4904
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9276 /prefetch:1
        5⤵
        
        PID:6668
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9256 /prefetch:1
        5⤵
        
        PID:5136
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9800 /prefetch:1
        5⤵
        
        PID:6176
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9020 /prefetch:1
        5⤵
        
        PID:6160
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9004 /prefetch:1
        5⤵
        
        PID:2364
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10080 /prefetch:1
        5⤵
        
        PID:6368
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9820 /prefetch:1
        5⤵
        
        PID:6036
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9664 /prefetch:1
        5⤵
        
        PID:2264
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9484 /prefetch:1
        5⤵
        
        PID:7016
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9688 /prefetch:1
        5⤵
        
        PID:5616
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9920 /prefetch:1
        5⤵
        
        PID:6392
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10060 /prefetch:1
        5⤵
        
        PID:5348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8532 /prefetch:1
        5⤵
        
        PID:4936
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
        5⤵
        
        PID:212
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10720 /prefetch:1
        5⤵
        
        PID:1668
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10728 /prefetch:1
        5⤵
        
        PID:4988
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10608 /prefetch:1
        5⤵
        
        PID:1552
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10268 /prefetch:1
        5⤵
        
        PID:1044
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10468 /prefetch:1
        5⤵
        
        PID:6412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10272 /prefetch:1
        5⤵
        
        PID:6280
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10436 /prefetch:1
        5⤵
        
        PID:6204
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10288 /prefetch:1
        5⤵
        
        PID:2452
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11012 /prefetch:1
        5⤵
        
        PID:6380
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11024 /prefetch:1
        5⤵
        
        PID:5376
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11096 /prefetch:1
        5⤵
        
        PID:1236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10936 /prefetch:1
        5⤵
        
        PID:7672
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11288 /prefetch:1
        5⤵
        
        PID:7772
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10012 /prefetch:1
        5⤵
        
        PID:7224
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10916 /prefetch:1
        5⤵
        
        PID:7308
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11500 /prefetch:1
        5⤵
        
        PID:7428
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=11112 /prefetch:8
        5⤵
        
        PID:6084
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9720 /prefetch:1
        5⤵
        
        PID:8156
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11632 /prefetch:1
        5⤵
        
        PID:6428
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11916 /prefetch:1
        5⤵
        
        PID:7588
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11356 /prefetch:1
        5⤵
        
        PID:7920
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12136 /prefetch:1
        5⤵
        
        PID:6044
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12232 /prefetch:1
        5⤵
        
        PID:1576
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4835200031097825439,5680468397661016759,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12416 /prefetch:1
        5⤵
        
        PID:7244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.idolwhite.com/fr/
      4⤵
      PID:1132
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:2388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.firstsexvideo.com/
      4⤵
      PID:3152
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:1732
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.idolwhite.com/fr/
      4⤵
      PID:4840
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.teenagetwinks.com/
      4⤵
      PID:4152
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5076
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.studtoons.com/
      4⤵
      PID:3928
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:4564
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.shemaleseduction.com/
      4⤵
      PID:2964
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:2576
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.youjizz.com/
      4⤵
      PID:2752
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:4156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.teenslutsgonewild.com/
      4⤵
      PID:904
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:3752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.studtoons.com/
      4⤵
      PID:1504
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x110,0x114,0x118,0xe8,0x11c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.manuelferrara.com/
      4⤵
      PID:5208
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:3888
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://gaypicstgp.com/
      4⤵
      PID:5692
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:1032
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.spermglazed.com/
      4⤵
      PID:5336
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.momtgp.com/
      4⤵
      PID:1316
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5180
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://penis-enhancement-secrets.com/
      4⤵
      PID:1212
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5320
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.youjizz.com/
      4⤵
      PID:7004
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7020
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.momsneedcash.com/
      4⤵
      PID:6796
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.xnxx.com/
      4⤵
      PID:2332
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.mymilfstory.com/
      4⤵
      PID:6192
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:996
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.fetishview.com/
      4⤵
      PID:6464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:1912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.shemaleseduction.com/
      4⤵
      PID:1812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.collegefucktour.com/
      4⤵
      PID:6460
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:4308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.firstsexvideo.com/
      4⤵
      PID:7000
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:6928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.shemaleseduction.com/
      4⤵
      PID:5484
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:2212
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.xnxx.com/
      4⤵
      PID:5640
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.idolwhite.com/fr/
      4⤵
      PID:7096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:5920
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.shemaleseduction.com/
      4⤵
      PID:6452
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:6036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.clubsapphic.com/
      4⤵
      PID:5688
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x7c,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:4748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.momsneedcash.com/
      4⤵
      PID:7120
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:1612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.cumswappingbitches.com/
      4⤵
      PID:1876
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:4208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.realtrannies.com/
      4⤵
      PID:7596
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.911asians.com/
      4⤵
      PID:8152
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:8164
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.coolgrandmasex.com/
      4⤵
      PID:8084
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:8100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://greatsexmoms.com/
      4⤵
      PID:6824
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xdc,0x114,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.collegefucktour.com/
      4⤵
      PID:5852
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.hentaixxxsex.com/
      4⤵
      PID:7804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.dream-marriage.com/
      4⤵
      PID:4944
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffe907946f8,0x7ffe90794708,0x7ffe90794718
        5⤵
        
        PID:7576

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x528 0x43c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4836

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:2544

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4696

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3028

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4820

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5816

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3504

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:6900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Nava Labs\Nava Shield\NavaBridge Libs\Browser Plugin.dll

Filesize
96KB

MD5
912924f628e277be9cc28a5f2a990cb9

SHA1
13c0166469a271497043a2f13e9a6a610dc2b336

SHA256
bd474c5aafcaa12f20da5ecb29e17555b953eca46b4f56588a72672a36d4a8eb

SHA512
b33b430254f9ec32ecd6224124db69af93de3cbfbaf422a0045641f7961834a67cba1b9fd97f4e0e903e27e3360301c5dba214a6b9156c4cdf8a25115b860c39

Download Submit
C:\Nava Labs\Nava Shield\NavaBridge.exe

Filesize
1.8MB

MD5
f73291cfb22a4f0520d84f4c572a4991

SHA1
067db7194440c327d622285ea66d24c7200f68a1

SHA256
0f9560ccf9c7fce9e414bf8c516bc2c4a9d54321aece800cb7851bf1ee2960fb

SHA512
c1096a90821d25bbb934b9bbc636fc8e087e3ce6a44eb692d06ef178a19be1c4109630e8251a893b8091a84d0d607cd14ec6358bd8bb445649b451326d09d999

Download Submit
C:\Nava Labs\Nava Shield\NavaDebugger Libs\MD5.dll

Filesize
92KB

MD5
831295342c47b770bf7cc591a6916fa7

SHA1
2c9063fbf3f3363526abdc241bf90618b82446d1

SHA256
8341ecc0938ca6d90b7e0f02af2d7e6b571c948a03a99d54af61c4557c78d656

SHA512
01419defe963a987989cddb0e21cf651ec3eefeae97cf4b257d4caa8da26436a647e8e4d95cdad22bbb0657171f6d3d9c41dc6fb217ffc7d5172ebc9a409d36e

Download Submit
C:\Nava Labs\Nava Shield\NavaDebugger.exe

Filesize
128KB

MD5
ac34e6801433ae21898f6d10d741b578

SHA1
53b5d70dfe5b037cebbadb74044b5e2c77811508

SHA256
ba79640b230fb5f1c1ae566458cdcb1b6a34552065221f19836b70b638c0273e

SHA512
86e2dde9c44a6f619db1de76b53cc376831df94a9bafbe1ddcb448caa1c6c3586dccf3c21d2d9eb103d6e001eb2d2e8d9d0699ccc80f5f8d25e36e644a133ecc

Download Submit
C:\Nava Labs\Nava Shield\NavaDebugger.exe

Filesize
6.1MB

MD5
6c8b11f8d3f5f8e559f647a47c601218

SHA1
325a43a6605c9dd64a37fb664c7bae07bc7433b3

SHA256
bf60db2748a820d4605cce3c6001b20468152b6fd40f869fb8846793a07964e9

SHA512
f987b14b0bb683c164fd868e30475ec63245d68a96ffee3c48e69975369b963357a11574c0063d13eb9b8ca89b35ea50aac7eecf54786830b43ba2efb2be536d

Download Submit
C:\Nava Labs\Nava Shield\NavaDebugger.exe

Filesize
10.0MB

MD5
47ef848562a159b2ce98d527ec968db2

SHA1
56b34310e8ede0437c422531bb89b2255a03cb3d

SHA256
7d899d2d33bde1c7f55ba0fcd4630b817e42e5cd1ceb8739511a990455275f90

SHA512
ac05354eacab4252e57151e98b8845d142b258590269ef92a724818623f2912b48341555ccc604a810e89ced3178ffc896ba116805ec3d129d9f6932296d935a

Download Submit
C:\Nava Labs\Nava Shield\NavaMod.dll

Filesize
5KB

MD5
3d7f80fb0534d24f95ee377c40b72fb3

SHA1
11b443ed953dae35d9c9905b5bbeb309049f3d36

SHA256
abd84867d63a5449101b7171b1cc3907c44d7d327ea97d45b22a1015cc3af4dc

SHA512
7fc741bbce281873134b9f4d68b74ae04daf943ea4c0c26e7e44579f2d51883c635972a405dd81cee63079a5ba9d09328a1e26e7878547590569806d219d83c7

Download Submit
C:\Nava Labs\Nava Shield\NavaShield Libs\Appearance Pak.dll

Filesize
64KB

MD5
6c40e5c4b5f6f877ef61fee43de941c2

SHA1
88ece4409906c73a8b544c6c88164d7c412ff818

SHA256
aba4d0280b28607096bc3dc0ff9127de385a8a49a11d2f21434b5ee40519cc5e

SHA512
3e94988e22486c71b0f4a2e70a6f4637be283309ef9727c8d997e191f6cafded115b488c3cf26036e123c86dbeaa6b6676cf4abcd0f9800a85c22b3e6ef8cc6a

Download Submit
C:\Nava Labs\Nava Shield\NavaShield Libs\Appearance Pak.dll

Filesize
136KB

MD5
fcf3ac25f11ba7e8b31c4baf1910f7a6

SHA1
fb470541f0b6b8f3ce69dcaa239ca9a7d7e91d72

SHA256
e5b3249fbeea8395fd56c20511bfcfdb2b2632d3c8d517b943466a4e47f97b5c

SHA512
47c467924d64af4a48a6e640778aca1dce379d16b06bf3f60a44025034c15ce1498ef307b63cb04e5c0cbb6c2ac58022acdb0d6efb1109c5ea31f842a320aa40

Download Submit
C:\Nava Labs\Nava Shield\NavaShield Libs\Internet Encodings.dll

Filesize
72KB

MD5
de5eefa1b686e3d32e3ae265392492bd

SHA1
7b37b0ac1061366bf1a7f267392ebc0d606bb3db

SHA256
a50e56dfb68410a7927ecd50f55044756b54868e920e462671162d1961bfe744

SHA512
c71270a5275f91214444449be4923a70243a9e2cd06afcc6fd28ab9f2cd2d930219ce8ed9ec008750b2611b62ed26b65cb57a75c6035201cd9657263d157d508

Download Submit
C:\Nava Labs\Nava Shield\NavaShield.exe

Filesize
4.6MB

MD5
f1e1c706b972c944509f2f874bccbb26

SHA1
8c3305eb3848f08e10e17c8cc87769ebce971959

SHA256
9846ec488073b3b7d13b26fcdd0b62b742eab8eeabb3d64861c54c7dc8b2585b

SHA512
13dd5caea39282b0dd50dfcd260938fd4966cd96b3688f64689a3a7d2cd7500415c1727e4bafa65828d0d6558a1e98469a955530587fcbfd393b1f1251c6ee77

Download Submit
C:\Nava Labs\Nava Shield\NavaShield.exe

Filesize
4.9MB

MD5
1c77f69ecab1e4408c731e9adaca8563

SHA1
d21d2f7e5085841eaf6b2b8fbc9135f1e308da29

SHA256
0d7fc1b28b9dac87f3cf2ee46b85ce37a389770199da9b60fbe7002a851e3ae4

SHA512
b4e49544882a5035fb823cf7cbafc91e2d2c88b208e7ecbe3f32cf335486b8ea32f7cb61f10aadcae63406cd634ed898a2d18ddf0f325e5517114521eeec3f25

Download Submit
C:\Nava Labs\Nava Shield\bridge.dat

Filesize
176B

MD5
e66f1107f995d52bcd90421b3cdc0dde

SHA1
245acafa2f3dab3f2b7f183d34267dcd976199c0

SHA256
45fa6eacea58e682c2ef2bb9e888cb6bf396c37b957fd144ca73c95699ad3c74

SHA512
0500f9dec5cfdfb80bc5763943deb3111ccde4b35f19ac124df2e5abde2681154977f160a42e9ef50698b0ea0cc26fc09361a3917534038f141dd047f0287c1f

Download Submit
C:\Nava Labs\Nava Shield\config.dat

Filesize
4KB

MD5
c9e73e5d54493dc3b76d82a73252e432

SHA1
6d2a5b93cc6fac8b20a3bd6d9af7ea1963a3f992

SHA256
677f545c2223b5578c0c60fe8cd7b7b92f5935287dbed75311e5b2bc43a6f675

SHA512
2b41bdcbb8f94915444474bcf4f0b92f1bd9d1fd1c12d57b2a7a738c0dff3373c2a4ad06ab776a9b0424ff71afae183fdd6d2cda90bc925ab19f4c65fb69586d

Download Submit
C:\Nava Labs\Nava Shield\config.dat

Filesize
4KB

MD5
27bd04404f0da3f04f6ceeba8974fbe5

SHA1
ae0ad76bef77a9f645b8341954c9200c6a5a3718

SHA256
6b2883487baec84ca8ce5762d2b77cd9c97766fcc76c18e8194844fa82a6cd5d

SHA512
71be48fd007ac554876a77fcfb8578ae40a6895cb3cc3024a1fa43a635fdc3967c7b93abb004fa973ebf99a97d0a5fcb83ee2af2eaa4ca3e4ec5fae13b396f9a

Download Submit
C:\Nava Labs\Nava Shield\navig.dat

Filesize
255B

MD5
0bf850cb9d0aa0f4c778cc515b79bd13

SHA1
c0cb8a58cba046d2c7539025a39c8a1af81c3914

SHA256
9c4723ecb77e39e58eda9c60f532724aa3bf69de30047cc7b6522534cd423f00

SHA512
649c13f9f4fccc03ebd6cb2c3752434c69b5a8d7e9b94cac80cd98a7624bfd00648949b18cd720faf89fae050f6b523221db589a550c6ce4513e76ff0895da5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b206e54d55dcb61072236144d1f90f8

SHA1
c2600831112447369e5b557e249f86611b05287d

SHA256
87bf9a4c3564eb3d8bef70450da843ae6003271222734c4d28d9961c52782e0b

SHA512
c9e8d2452368873e0622b002a0c2f8a2714b5897a09475738a9f9740122d716a9f0d3841725230d58e039564c820d32a6f3a675a7bb04bd163bab53dcb4e22f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
73c8d54f775a1b870efd00cb75baf547

SHA1
33024c5b7573c9079a3b2beba9d85e3ba35e6b0e

SHA256
1ce86be0476a2a9e409fcb817126285bc4ad83efd03ee06a2f86910fe18d4d94

SHA512
191344f5830cfea68499bd49073ffa7215a42265a9629d203d07849b2417c0ffdbdbf288bf2c669e91009a0d7e8bd6a6b378c92fc283049141231ca7bf4da3b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
59KB

MD5
a3e8b47540caec4a14e6dff9f5f523ed

SHA1
377d58f804bbd8f06b7774408c3c3434b4dae39e

SHA256
370bd206528d15d82494f1554ff0654273763d5f6063f66745f36b136ab2bd2e

SHA512
bf995981a68e02569c24ffb887b030d0059e6651d368c93dfd70ca6590f8a4686ceea093aa0d2c5cb1c8a2b79bd0b935a4db494b8626f15f8f24fcf0a5e88b02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
37KB

MD5
efccfd22f497a65c4df751a68c3ea652

SHA1
30325189183297f7452a75b71dc7aa6654dc1c8c

SHA256
23a731ff5e2597172286fd6b7e60b5b70c9d26706defddd12cff82d9c3a696b3

SHA512
eacd52443dfef7c081acfe156d548df2ecb277664033163169a688807e288d94f73f0d621a1a040e8b9a43b2f929a2245abafe4ff6a73c798d03918ad6334513

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
36KB

MD5
cd263fa18bff02d7c245a00cfed5442a

SHA1
e391f2d9241a22d66b7ce475204527d6a104302e

SHA256
fa4d588a56a0f8a8992c2937c2478d656f98665e910c2bab3fb9a86d5410a84f

SHA512
1d6e285dca134581a23d14bfd435fb698f494b9aac5c7fdc1f5ce91dcf936153d7c9cc2792b5f4d47e4766f56cf944ed8943a1d8d1b408030135898f6bd4cd59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
135KB

MD5
d779608070d3c7ea9ae19f5ed5c6d25f

SHA1
50ad2478ae8bb5d56dd8cacd923a322c6518b38a

SHA256
de4864ccf2f1b562bc2b5c24e6d96f5f19f7bc564b248f16865bb713d4f8d05e

SHA512
2db1b94e3190d486d8e59dee35d7c73d74c4ddd5b3d4ecce4ed88e695cd0d412c21437502c5456e1d80c997a432fcbf2dbfa7a01c545572d0a5edf88d17933ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
22KB

MD5
a430457ecd0291e89a8c0c708cbdb884

SHA1
054d060780c962364b99ab2c93f50842327ae4c7

SHA256
024a1d8cde2f74d6e75ee79c5839737f727d96b99110e4e37f94de66ea066bea

SHA512
a352e03b1ced2f4d7589a2def947b34a9411889044b2d0e88ce30fb3ed7a92e2b6014228547120e0660daf4b1abe3d75eefc49a0ff7bb02f9ee3601922e82404

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
35KB

MD5
47f09a78e5d17d771fb06bc91e174499

SHA1
b335fe0226d224782678ff7bea49773993e6f052

SHA256
cf2e4f4feea57b2fb89e83ed56fc49bc0bf21a4f1fa20afe2e83d745c8890fc3

SHA512
e4318e3ae57c2260ed0779bdb8fff1e3141b0bfebf6cde4a54a10b9848989946ee06f9f32d911f5157473b9902fbad21dcebbcfedb5c81a576665915bfd3fe2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
45KB

MD5
81efe59c1c83e33a305d29d10fec2ed6

SHA1
d2be336516e8078886cff0b4d5fd35e88d8d1eb9

SHA256
dad10d8c8c6c1619ea029e47545baa06ca0a5c457c9c3bb77c984c50eacdd5f6

SHA512
c146e5478a217315bf101651b86f6baa8394cacf8950a07b4150f9192b607402be6ee8fab75e7d79031f2f504b5e61c043b9458083b79a76704e33604c9a6bc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
36KB

MD5
6b2f88dd1fc37ad2228bc4b0e12bb011

SHA1
088cd68a9ce402835ff00e8e2c8ef2ccf4081a3b

SHA256
1b23e0d886e0602443c35df66f69cf1560710913bf88b512ed9cea147fccf0b6

SHA512
da2632680f0e8efd94e79bd2699eb3c433fbb95cc934167bb63f1dd7d0b0db4af9ec4d8d0467d058640aba5c624a405c9b6b4d659e7da17204898a2625e76a81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
64KB

MD5
c585febc335578a4aace6b96489c4040

SHA1
4064ab58a2dd57cbbeb442713964e6e55e58a74a

SHA256
fc981ef9976829b4f6b4d92df07e7ad560d30a79d7242606ab3cf8763e7baca6

SHA512
094cfd35eef8891d42a2e4234fd0727b7600ed10f636a54616b1a10f4fe47d26bc348dc14363ad8fc82b009de737020037f696bffee21b309f95f5ebaaa3e261

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
41KB

MD5
7d992431ee5e40d98d9ab99cb5cde954

SHA1
3e82b380c81c2f83e143e4bb1a4437903c689f05

SHA256
560a9afe1c7efc78932e5a841e202476c7af320d0aec9d916cc2f065243cfcfc

SHA512
8454e832f8b03864eca504a1866b8235b18a4a6cb82c87fc7ce81be822c77554e7740eeae4ef7cb135ba161c4045f59f1d858d78ebc4ce181b4f9f55bd2c553d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
37KB

MD5
15e0a4e9b6fc2834eec6ccba1973aa45

SHA1
080a7126b7fb4063ea36c06beca3ebfdc4cc63ef

SHA256
11f7002d7b0e45f73367bf8e4f5763dc6a7f8f7d6be4f29f26650f13480a5f6a

SHA512
a0f8529d32d15fb24d87312c9c48f4f73d355ee8955c00f22b425f82eeda84933ae4fc15f92bdef30bc86d242ce189cdddef89e5137110e86b34ea1615187c6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
49KB

MD5
8991c3ec80ec8fbc41382a55679e3911

SHA1
8cc8cee91d671038acd9e3ae611517d6801b0909

SHA256
f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800

SHA512
4968a21d8cb9821282d10ba2d19f549a07f996b9fa2cdbcc677ac9901627c71578b1fc65db3ca78e56a47da382e89e52ac16fee8437caa879ece2cfba48c5a6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
75KB

MD5
af7ae505a9eed503f8b8e6982036873e

SHA1
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c

SHA256
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

SHA512
838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
34KB

MD5
f8c7ad0f0b0229d0d1aec846b48e8d01

SHA1
49a335ad512f436385e981a40d5ae969dfb5f8ab

SHA256
7d52cdb6af308a5118e3257dc94f4b1aa85a5dd17277d0de7241415d72252945

SHA512
61cc5b6a3b08203922f4ae2e1e0f4589daca16dbfe7d8283d4ef91c18852c9a73b0b4ae59fd5ec619e7a9e46bb80464c64b613f3609a39a58f16e3506676355a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
2KB

MD5
25e06f02f2a7ee165d9eb2429dac24b9

SHA1
78ceebf6a6c678f9d6d9317652f1d43b6ca9c9e6

SHA256
93c3d5fd36251bde0c614350cb16f13688ff13f545d86ed3ec2f1831be657c44

SHA512
61da659846c85e1db8bd0fbaaa4342e5e4b2843988e749a8234af2fba024a59dad87ac216c62826a60031ace53ede01bb2ebd80d6f72f4b3513cdc114fdd0abb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
5e555749d9310e9ac84e8a41a9d933d3

SHA1
e0ac1dd9204a1e230d2ecd85b96d45063dd8b7c6

SHA256
7cd3362340af01aabc3d07177b271e4ebb41ba531da9979f465fe77c99bdb035

SHA512
9450c8845de7007243e60286015c6010b449e526b8a64349341b7e9c9c177a16ccb1ed53c4856b1eed59f9cb6454018a310600b32c33689864abfffb1db1bbac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
b76acac83dc9d14e6f694ce3c83d71e5

SHA1
edc78015f0fea7581882964012825516224a3243

SHA256
147d98e2048c960085500ff2bc7abeec3a0ced73f18d597af2b8f36d8be0688d

SHA512
e6867564ae5d9852c9d45be91c5043fa7ee1bf6bbdfcffa2f1d525ab9e5b1511f88968ca366c7533bf98fcc68b33a7fccb850ae1dd7cd483591d5bb091f7d824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c87dd8bdd64308568cfcb419db404039

SHA1
bb9e87704e1bf7a4ddc15bd1708b966b75e4e388

SHA256
7079f8a39aac8879d8251599a494894c95a850b47d2345c62549b26b32fef9cf

SHA512
d513e98b48042dcf27825d18777cbb0fdaa9dc57df9621d088ccd3e9f14bbfb55eccbb0471f397d919801c74b55d627def49e0bfbf8dd38d4f706665c37b4812

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
8944df116a0ad326e48425f1172148e1

SHA1
04c449780060df0f8023c5af5b616a32808156fb

SHA256
ba2d1688a7f6de3f3c8210f271cf9e72f44c5576f1a8125b445e9d8513ae5f51

SHA512
a5cc9cd9841fe20be375de5b72fa2fe546f5af280ecc2ffd71ca4eb5e8ab4f6b9adf8e1bf71eb56efef3fe7ef82eb53d756045fac505a4dbe68be42cdb88799a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
536fd6ee3d0e5b972b07da4e04f1c6c5

SHA1
8480fab5b681498592969b714cc88ee27e8e42b3

SHA256
9e85c24832010ab33849c59829a4d526a974424d3dd3b58e25f9b2c13c4d72d9

SHA512
db9ab2ae19df979f9149d6ff07197575b0e590293cb231f6c79ea3d28a916a55532322d0e81b8c3d1efd80936094db6fdae6195a7710a031ae270818dd7dc03c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
5378545fd8607d17aae4b13d40d0108d

SHA1
5da66fa8909f6bce30c55742fd954c3169ecfaaa

SHA256
eca3c4257f803b36a80e8ab8364d6f00030c7af374d9f509b97bab6052a57fff

SHA512
248be30c604f44dcce2f8f9ddb64cac4f317c787c96bab5fdd38b58f0276bfeeb9412871795e1e4d0605c2a0de0b58bbd2c54a2455b6a56a9ce931c35556c6a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
cb252a7e5d2a9ce906b3cc7a38508337

SHA1
a4432da147570149aa273daab7377df5ddabab5f

SHA256
9629e939fe664b549b272be978d0c2ecc49b9392764bebdc92dac93ce1a3304e

SHA512
5674b7b64b23ae064ad5366378d35df71b57b8fe0c3fd986267ed8ba88d6ec68534b1dfbc28571c307d2eab1532f3a15a8856c877b9fe99ac6e9a8039454eab2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
b2144980ffcd356cf9dd996b05151e89

SHA1
c6ce6c825da3525cc6583dd4df4c4a659b6d27a3

SHA256
46a7f2d31470698306330cf5913fdfe0342c2cf6c815d9f7b38d4919dcd08f9c

SHA512
c193df1d2aa6c436cd96ae6b196881a7563a0fd23a4e7888261b554b8516a45c56a1a4fbb714a4f7e4148564dfb9f51dc7908652c9b0ed076ce95a9749c89f8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
780d998a578ac61da1eab0e5241100ee

SHA1
9c6858a5e49d0cfeed5ff22fa80a713334ab7141

SHA256
c9b47489b7b8f6ab9e51a76cb8d24568cfbe4b53a5aaa04105f860f2b8cbe532

SHA512
477232581cf2edcefbab25f929657ea71477cec64bd06a432effe9593fcc68b150185d69d7f3895f82e85f5e0a3c5a4cb073bc321690188668ec1cc6da09ff5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
3ef46f8807a92e19f722eb492a000731

SHA1
d27e9fe860452695876d455adadc59bbb2c6aa60

SHA256
5b53cf4392180fbdec21d6a4cf4add4a95a4e37546c29e469c0e581deb8fb614

SHA512
41336a01eaa8bd734a9fffdad1d2f4f2bb9d57dd95b777e652164f49038e6daf096a8419b997d8c700167b48f49e5f603e9baa3bd6266ddbae60061ce8492bbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
b27225cdb53eca05271fe8f5ca89b9c4

SHA1
265276aff9e95ba81067fa57884aa3c7182afe36

SHA256
97ea9903bed70d16933fe01ebcd94dc5adb5814b0015515b7e9b17a557296ec7

SHA512
516be2495ea375e2c3efd069719ab05e9a1425b15e39000b459ca5091ae2235e3e19cb220ab3968344b5630f37b5b28cee4de5ddead19c90996bf72d12161757

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
2a45e7b7fc37868969a4b999257566bb

SHA1
02d29ca5bc6d8cec4a97e251f50d7d9374427694

SHA256
bb4d5ab48c27ce93bc9b778d640c8a4fdce9a7a8824b07c434bf5bcdb8249783

SHA512
b53d562a035f625c5f1ed5d8afb22adc4faf3b8d2c61d3831d1abbbd8eae5deff572a877d0cdfda06d23d538c95297a067c27bdb1db0563d379e63eaf23d385b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
14f9fa206008f68377863d2b0bdfb44b

SHA1
ed0ccf5d3c7551a3bf56a2f40e9ad77d73f9dff0

SHA256
9b514ee2536891edc1cd67a2336c336518d4fe83da62788429367a61e09da378

SHA512
5f7a22c5bc771b323b2906ae1ee913d2369071a67b0cda53364983544a19f5ddad01cc4a5ba22faf843bd031256241f7afbf2a0171063cdf74afcb59d7141de2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
982B

MD5
b2ae787b42a35b6f9825d3d1f4becdc6

SHA1
b9660952ea6045a0b1462db6a4cfb3f92c0cb38b

SHA256
23376d835710b08ba1e76164c4fa3b287486d766cefd9ddb4ff10e4ec2ab9ad4

SHA512
51540a93648ca4b55ee7e1fcbea6e666c5a59405783bccd15ffe1b4e07394b516c9585fce895ce9251696a9bd9ef9c4afdc013779acdb019ddda39ea2fd9697d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
db56ca2e35b7d8ddeab6f6ac8899e6c0

SHA1
6f071995d5cb0ee71f714ad0e7fdbe9807aa96d2

SHA256
3d40118ecca5a77c970655b25d8771019f54f9523a8b065de58547478cd71b97

SHA512
e3f447209d88b686f88794829ae0499deed964eaca0cce6394ca4b69f028c45a883237498c5e05192113e91ed213c63b8288af4d00c654f4573652deccabd325

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
7d70dd288983de88e0f15d1967dae1d1

SHA1
0a120c98486d5d5b8f33faa99d60c0d1433cfd55

SHA256
e1436d4f73d50b991378970dcbed537f52591518c1426b65fe3170ea60133387

SHA512
e9790cfe4e713f6f4111a1ebebf1d53a9eab8ddc0b534d63c4db4e344c0c042d0cff07847682790e4b5455e065f7ba4cb9f29af3d7bbfd20509c821c7ea5d96e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
dcf7bb9aecdd183dd953682ad72791f1

SHA1
c67e3df74485460df26566257d301e7b57d4418f

SHA256
a9f9263905a1212d1432ef36f18be1dd12588af552d899a2cb20ebd575ae5723

SHA512
becaf6d28939462fae1d8d86a197c4175e603865b6981bc5d0771dfcbe6ecd289999fce7aea87e09618234c08785ee84b67019e9d95eb0778515dceb195de9c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
ecab7a9908f6f2d23383697305a5d1ce

SHA1
ced69d24904e328992004b4ff427d47bf3379d83

SHA256
8e8e1c4cdc85289578082ab8c96be40935c30191e82c3e101bea06cff784559a

SHA512
43407421d8390056ab0e62fd2921954b915fdba03f4461124b8efb33ecd405226772e6598430c89e4fdccef57d603abb166a31ee2a56aa67edadbdf2b3e48db5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
181B

MD5
53de9a72b690e794d3fb0c866fd1f4e2

SHA1
7616b8b9188a651b40b3de81e6f333072d82446a

SHA256
aa216bf133e3dde0819db20b23826d5cce1abd91cd9cc8cb7cc2383ac3f1fe96

SHA512
c05d5756b71a15cd0bc1b521a06da861afe67218c296794d6f240cd8da1f34e1e0252e7ec8b769cfb5dfe646b9131775f8588a44990fce874b5b40dda36d2c6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
f06be40cb4afe8419c9370533479ceff

SHA1
06a7a973041116f0046eef913cc834ddf7c2465e

SHA256
0176182164853361b00da85e64500fa801e26021744073dfa66f2b943220272c

SHA512
dd54631e52d9e1b77b0e3e73e72f17610677b85e45f3bff280b95fdd96dcb44a7f32caf5972c0ce3c6e633700abc84c91471dcf0aac5aca5d5e90d5489ec824d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
a7f701557f71a848faa1153d8dd433c2

SHA1
a16561e40e7b44f165a19a2f87e8d8f1826331a7

SHA256
ad27ccbf446a0f0b4045359b8220ba666ad68c896bb5abd8b7231c91014e09b6

SHA512
8821f0078937206bf6c3f7f38b387c72ba0f6a72d958ff2643dfdf4fc1c3b4170898b37980485e796a34fa53d3a14fc564ff069e1e56d9ac2aaf733a2ed854e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
f1b756cf6f807e0c2428eaa4f2938084

SHA1
6ab6b8f96df030dc8af45fa972042cc069e640b3

SHA256
94ae3f99197d06e25196d3af79ddd0c4cdb71f0869d2d751eb15af3d10f968ee

SHA512
40764ede311ae7fcaad0b10f6be54c250de0c5250a0c3f4c2af61398f9285ea1522e1d2ab4dd3feb009ae1bda57c1fd897d66bc12cc4abb760a5b7ff8cfc84a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
184684f1c7fb83b042ea97a22e531580

SHA1
bca39f58399912bc508a27458d13604747cd373f

SHA256
02bccf810f7e7e2726f87fa48dbbe2e4ea59fd2464666e48e550034874e5a04b

SHA512
b11f8ab56b9b63ebe7bf5312bda516fbf3ba28facf92ba83159df78d164f595fece4eb216cce04041fb21e7e785c1fe3db808dd3200cbdb186873ceea9fe0c5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a8ed19a4d4193f8bce328ef94d626dca

SHA1
ba56e7a9eb1c723251bb049eca23e937bf36c21b

SHA256
bdc5527c13191b4313f7497b5269ead729429ac009e61f426ba68bd9b15f1e64

SHA512
2f91cdc6ad5a4739130a8e8230cc5dabf1b08f084d58163f021e1274eadd6db7aafba81bc9801c607fdb96ed3144d1adcb2474d133ff66d4f52b158540658564

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
99c7730fcacfae484b4af3b1205258da

SHA1
e5037a0ec191b3a14a12ff11493b2cee5163e303

SHA256
3e063364c532a01c2399215da458da699a14755d3ff156a3fdaca99b23e2ff3d

SHA512
463158e9ccc098f398d39014ab047ac7008a1129f3b7f90703ffd8fb5758d9444a07fae907476a462cb82389d4072e7f6ddcad55ec924d70f4a4ef133eba24d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
acf96cb0d7aa7df21ec738b37c516987

SHA1
a69e0b3cd12688309934afc1570bf13b9ee78c1c

SHA256
bdf469029d9d1c8d780609116bdf9ab5e2ee9a935b689350da007fcec5940f1a

SHA512
1232ce32d9994220629caeb4e4cc37b010c51ee38cb8d9bc9a084033158aeff52ddff9168ffc39ed56219a37731a2a28f2edcc7487a90259fc60dc115abb43ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
997dbe0b6b41b92f3e9a69574f0ad028

SHA1
fbcff28d889bdb8bec148c31f38e524e5421c54f

SHA256
2098175766cfdec0eba76557ec0d0a23ec7518a412aeffee777714f2b81e9c53

SHA512
5faf843b8e604d52afb293e2f698e60f978da002a06cd548a6f4ac8d1e0312800f07060a0fbb0d8d5506cc38989cd04e0098f33261aa61f02dea93f3ce7fc6fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
f4f84bb4cbe7b33f8e57188de1489aa6

SHA1
7b2f55cc6cc757b5029542ecba35affc46de2207

SHA256
60cb8adf1330d6671ecec0de74b8a350e0631d425c6dffeff0b4c0eb162e73f5

SHA512
4a2bcc96f8eccbbf2ec2939b5401095dce138d1a6c8f248586272ea6d11bd35eb3de1a5912764528ac56329fffa85ac8f9e980b94a5058d0d139038d46df5b55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ee180b9190f777abb915730cddf65b75

SHA1
20f8a188915c39001375444587d2c671ff66df3c

SHA256
762ea53a4b89cc5bf711ff3dce3a3a36476332b4e5b70dee5554a3a78b080cb6

SHA512
98cfde8364ba0a4523bc704eeb9f5d1f95fa8f819b55d29a8433e51060bde6d3b75e2d776da097538048a5fc86636667eb7238738c5f5f32754880c58ce668ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
973460dfa11b76a3f3abe4866d265b75

SHA1
9b90ac73740bdc5650f815c2708f7aa2e069ab56

SHA256
1bb715d2d9f155e413c326469b7ce59bfa37a46be1fd5f4de9ea7b3be56bc570

SHA512
b80a16ba17c3b674f43dcc11b5e40a20f0eef2bed1af09b5e4dd69b458cb585eeb810e0989ff24a69b3192238fa988b74bf8ab920e62da51b0d498dc1e63bedf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
fc16f9e08bce7bddfe39f64402801a6b

SHA1
e76c2ac603fa3c753b395ab50a9d706a032df7c0

SHA256
73a0af76dab6a9868809e864536c14d139dfbbf1144d9ddeb319dc8aabfc34b4

SHA512
ef96a5f28ba18ba9d78ab268b066e01539c36ae76a81fc2a5b22e3053706d9394135e9243f297dbd22746fc17da2e6bac7e107f737d6379f7b09a09f9b129dfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
3e6f1bbb20b5b7efb2f3babbacc7fb18

SHA1
c51b0bbd3a26c8aae829ff25cd2c164a3650b6e9

SHA256
6dc7ec7daf20574e533d4138957649380d44dfaa3e80a52867a9900ee097db96

SHA512
ad92927820f07ce546083e58b886c87840b573f7113e086467c3f75b1fe294d944e06cf61426c658be8a4fa1149f32eee876f48e5708db1eb31ffde66c04d9ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
38cc40fed39d398e63b04c78932116e5

SHA1
5ed6370825ad25940c0f8ecfc38ff0889b02c5c2

SHA256
86138f905f8afd786276498650e69b0d659d7f8de25e41328792b1eb81ba0bb9

SHA512
0ece1fd5e17e11ebfcaf61df30a71b8acaf2edaab64914383451218bf416f782e0e3a332567887dac93aa5cd2286480d024fbfbc0009c9a3efa5109423e6dfc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
b9f50a7922bd76d3575f63f2c8c60c04

SHA1
0a7f4180fd7fab81c149b976325c540274a9600e

SHA256
b85e6faa96dc3e05bd4c90f5bac091f3f9e02d37c59ffb7f2cb2ce1f5625b31e

SHA512
41b13972b303af4e17be3f1d95342b572d5ae8f69a51d0ad5f442496f2f5e24ca5289359b44fc026a578ecb147abbab07bfa52217f5f7147e72aa5b56533aa56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
70fdb455eb21482423daaffaac8a1e44

SHA1
e558cbc62c325405eed5b46e51d6eee379e5dfac

SHA256
e3b90563da73c368c30eede848d84d335384b78b6204e9db1ac22126af5b811a

SHA512
70a2d85b143153f10eb7fbac1ed9422e26af15efc5b13e780fb2219bb51d341b6468e7521d9a9d07cc67748e49888aff8a76da1dbb1dcf9da6e496808e0d77a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
72bca6eaec2c94cf16984d9b5d449d9e

SHA1
7046d60910009aa7047a4e548637e27367625f5d

SHA256
639e6b8142941f4f4625645e32ac9b658bf12085731d51f49c3708d9ba9e2ffc

SHA512
0c8e12b3a5b4c91efb380c2cd8ad48924a384f99d9e94cd4167f4b7bd5e93e07f2f6b0b8fdca41bf7eb9af7782d1a5cf07f1d6c1656b3b53c850cff774e5e8ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
f6549d9f055de29412ace9dccd40c158

SHA1
cdb829ffb2dbc349cd7b771f8ce342f5f2099318

SHA256
842635701f47a73537b90f714201bda8a29d0eddad34a7983c678c704ea32b9c

SHA512
b857a652575e157aed465bdf90f09cf93c659001f29a40faef5b148c8260a6daa4964cf25fdcf5bba0b89067a6137138deb63285b6d10d8c2c2f79b945497cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
a8fcb08d3a96df41498c9e8c44f7606e

SHA1
43104f39260f251e17dbcc6f819d366497370172

SHA256
28ad14d9c9b9c454d76b32f03f3a5ecd4dedee953903627148b4f472cf21b5b1

SHA512
250cb9bd86ea8c0f10faf53d5a37d82484d93ce6f3a0cbe9e070b3752492c8d951cc1a1f8ad67b37507d6e450d71d98b080ac454349e57a5b7563211e9da7ec1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
c5858f5a3cde81dd055d4fafb3ba3a32

SHA1
b32f1e48e084bf7260f622776d768a1e98666677

SHA256
703e755633552a12de822cbd3e36c9f3631191bedc45d5be761e40dd9c4d6b6f

SHA512
10f221fefda9fa71cf6450047eec2cd980d16cc8ee1ad4139522631fc42f7776c4d65e4b21d1c5dbfd2b43e9a75e9a013dcf4429a074b149eb01c17462089f31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
b9050a413faca8e251527ab5451187cd

SHA1
f7189d097e5bec78f44a8c5b29b98f281f593988

SHA256
5401dd1fc9b88cb6dd7f05d813245fdc5d2e23f665cff4c7535f62b792b69a7a

SHA512
d37d43f725fdf42bb27d8675cf7eb67a1064be90b8c2a4e0aeb979f035cb58cdb30a274c7a43bbc163557198cb3830def5c71e00356411f92960094439d9582b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
41f9b2221f3be7db3d445a14a787ab45

SHA1
c05db70a28cecdc0406ce8a3226860845161a606

SHA256
0ab1a7024b445959eb876b148ff483d6aff8445927cf0be8ce04d73ce4064bfe

SHA512
0392d2e6508ea7983106f8f18c1f8c896cdc09d2006a5396310b695d230493b386f99a75ccf2250f10d5ae15ffdd708b9c54ce0232a7191ebf0fecd2da25c313

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
99c0005843213ff755c8e0d667f1e1ae

SHA1
e32f13332aec01b848fdee98234aa9adce8c5e6d

SHA256
9448fbae597d96fcbe26a72ad83966c9f596dc095864148f0a65342d46bef946

SHA512
f712863800ccf278a2d243e01c2518a51a00eeb2f166c0b722941bcc79f562ba34dcb2c0a722cf0532e03caab02e383b27a62e51b9817d407419a0b77117e7e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
2c2c233e5b7066b255b31c4fa13c5992

SHA1
7e308aa145da1465b27e7b1f680b44bbcb0a6567

SHA256
638c6236fbd2d30edcc55505f6222f5138e22e5ec730f23a78d2930343779db8

SHA512
3d31945846c5ff7bfbf8ce55cbdddefbccb831fa4ae67fb40804d5ed93be12fa0623cf7293ec77cceef9b49dffd9530c71ca9f0acafdaa9626f2968f43caa782

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
ddbe3ac4d70030301c83d27759cf2338

SHA1
01b165d7dff3f9c4bb10b3cb8de9ea73c5ab77b3

SHA256
ab35d83b483e6a83bf77307ce651189b2d0d7d5cc3bd8d82caf55587ffbf9555

SHA512
fcc1935f38c1de841e726ab51a97fbafaf8cd2ceddd516729bfd7aba9cd6c9c317968c71cef1077a0bdf27f4d09bd46678996b7e8a81e3451f84fb91419b70dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6ace52e421a324f9ddcb9363ee80c30d

SHA1
5a2eb879bba6c869ce0f64436c5b278daf57d8d0

SHA256
9a4496bf2fd59a1bd7eeb13273ed716007e4e6439f4511cad4a3bf6a808cdf46

SHA512
79d4862c310672ab8608bf41c2e24964107dc403aee9113fa0ca0eb813eda8b1c99201d1761949323b883cb04148507d4133e94859ef60b8d1e2184046be8622

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
63f81ec59ef44451c3000194cf290fbd

SHA1
120cf5592fbe2410dc188d2cc1333b74174e6f54

SHA256
69fc979e964e58c3743874581e7647ff9f7a12e9acea9830e9f70a1003ff6037

SHA512
ecb356b21850d22318fd81251e55464daab2b44b51728145931acd706b620fdb12a6554f056250e9e1cd42169003b7d1d7c731c8b78e38303b1fcacc8d928329

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
16513bab056ebecf1a8beff57946cece

SHA1
2c17aed2ce9bef1b1e004c3295550d1b446da5e0

SHA256
d295b2430d4361d25789cd28775a5704fedb20ca4ee3e8e7dce75cfd8d41fb8b

SHA512
1ed7d567fefa539998b25a605d456ea667b90f00346c8d9929c5ed2767324d32c4029a6bb9c066f8c3e85d2f85e632dc724a5e6863ce9a9d0bb18b5f2285fa67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d90ab68f1dd67ab7287b02fba2858d27

SHA1
96ab2ba6e7760aa28cfaa58c5d34a426363ddce6

SHA256
0a749e2e596d0ca501505d20c48ee0669b4d7b7037627982664608249f86acbb

SHA512
9921bee5f019777b997dde5234e372b129630b37442ad123b8cfb027a34bf3666808a82eeec86370d40b53832162ab959015b171f1bf5c0d83c008cc1f4b3d5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f9ebcea2e20326f458474140864ce962

SHA1
cdb896d23423cd642719558d2aa7c93a560253c4

SHA256
1f10bc3f2b6cc78366d0b069f745be5dc62f78896a4fbfd8ea413ab088575561

SHA512
f188ed9ca670da16c8368ca77eaa51c3e0481d05e3f2c08cb41b7abde6afbf70cee938c8f254aeb53512462c9d2d6fb337f902e03c40f6e37dce8b4824905aae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
fa9eae27fb6a7c92b8ae826883000d5c

SHA1
e1e0e398b6ba1cbeb0407f1c3e4d95b9aa2f1993

SHA256
710d6b97ef05e1956ee515a9533264e7aefd76a9a481eec9bd72a6bf8028ef0d

SHA512
c4ed796cff365ed47c2fb4c6f12c58137f36ae26e9bca90051d28e86882245537e9a6a20dff647986b4bbdbe9af824173c0a73db28837106e61b3d52431bf845

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
a36fd51e7435e33770428668e3f144a5

SHA1
ef897d73218bf1ef097014009de450330ce64a08

SHA256
cf320c424bc2fde00df1b448bca88d9b7149b4eedc77c0cdf511858551955bfc

SHA512
9e3e820a592d53d1bde87befc080ed7ff9d33e7e946614c43f6dc55412ca0d3d3e79f1a00f63050733a9427f6d4d2f755f48a1c5212e9f0d132e8ee40b733b55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0d082279ab6374175394854868c13364

SHA1
e4dd3d73cd0c234d7372eeae713699d4edd15118

SHA256
1b922d3531fe2bd4d8197ab6532d76f391454f78b0656ce537c627035b59e05b

SHA512
f4ce0f95261f15e9423623984dc09d1d44e48b76a2b4a910f1dae9014cab2fcf48050460864be6be70747fe10a0733cb09328acff24f4d53e8dd220ca6420054

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bcdeed5ecafd00757ab76433ce7080be

SHA1
81de88f042b45eb77aec9c9afbaf2fbca9208fe2

SHA256
132e443c8becc467a1940db64f77ea6164ce49fabe6f5db78d7c17a058e5fbe6

SHA512
997fe06098d4f0f06f66e5650f126110d9d02e43a98f743664f66d5f4d42ecbcaeec653af715136c813954e19d49cb03778cdb264ede39a9f8d2c9749bae907c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bfec09cf5ab9fa4d40d7333f6449ab15

SHA1
a884404120dbcecfacb6d36d6f0835f7d4e834ed

SHA256
938976eb0897da9bba7d01e5f1b5e761c442ec46d55df50fc679c6e43afad092

SHA512
7dd1afbe5a0d86806d3c1e48255e9f1eeb989a55f964aa75fbfb663630bd2615b091d76f35b07aafb106151fd214f33c1c1503e3841dfe058b41ddcc0074c3dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
bc2757324c7c7573abd4f1c3fb4cc9aa

SHA1
b949b1cfdac4b08f696d0fce4a6b5c97396766cc

SHA256
f7bd51ebeed5de87b98695b745ac7acc62ee31f0b49b2185e28941bd3a5a6f1a

SHA512
85a0d79467204c1b202fca85363cd6cbee19f3369cd4db7e37fc055ef8b85609c85480ccdcbad20b7a48b007054b36694299184e8ef14e9e3d94d60f02ab79a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f6371e48ed4c8d544f4dd73299061ada

SHA1
c9e3dfcc59071dfde6a0175e2b5a01f28cf541bb

SHA256
a9558ce9ef6ef2f0a1d495666351ea26f70bf89fc9d9790fa55ee090041493a0

SHA512
b7e954ae23875cafe1101f217bf796fefed3c0eda8bfd5cc9637be774ade4e2c514613ad8a210b27950bb2919cec5050a445d8eae86d45a868bedc46fc48d5d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
492eb4b84861557b3d030382d31af21b

SHA1
1d8f850fb881be317de7c89c21ac4ca3ed12df33

SHA256
a9a2471f8e30849b2231a1241cc4a9912d299105d4a72f9c185ca8f189cd8a1b

SHA512
20887ecdb799e9ff8e9fd156a6a3ecdb6b5c4bc920074adb8b3663c678eef3747ae5c7364579f78b3b7cc3d0f2a518abc9c5b6cc337cbda999310cd2c52c95f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c8850ad6ebe1c8fa2b180e9df56a66b0

SHA1
c4471902f13ee4f621f4a4cdfb8cb72e0b4e16a4

SHA256
661ff695102940384aa5a80031803e50a2e48e2c9f0faebebda01670f8fa56e2

SHA512
1020aaf022d76ded5a21e8e809609cea78d30f2cd1b59ca6d5dc2c4ba389b42719e67eaf25f4d3c3a977320e5d7c8f003e7c934af379161606ad13e710f8dacb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6aab731139b3315dfe8ebc3648408f31

SHA1
0666f083445791ea560c3b945322f8e98cb70ca5

SHA256
b1c7c6b35a67e6ee44f9030df399a400267284a1694ab59a02511f1eb3c22293

SHA512
f65ff3bcf6f865e50a8b1ce109efba3451d5209d42262eba4a52bfb0ca7e2082dcbe278c3eb5f5993fc8e1038222994e80773dafb080427006babf4aea462f56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5fd990.TMP

Filesize
1KB

MD5
8283d5fa186aa5b6f2be9826eb27ca7b

SHA1
06e2f6f1f692540ce7e551821b1d7361a3534900

SHA256
bd3fce0c2ff69bc30082d735b2211b8b17c9e94e91f5fd8273dd0994a81802bb

SHA512
142c8043fafa756b648590c82b534939ebfa4866f98e97a0386ba8e6a82dcf27c77742c7971ccc69f338559bee950f7839877dc4d20a43644dbcf3a367df4ebf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d635c7982e737bb30d2946c92c590ce8

SHA1
9fa743f69631690d26f3601bb6172e65656daa9e

SHA256
2ced81859edeba041bfe8715c777a3318e9ec7e889a8d14c2aa7896262f567c5

SHA512
a2f85b1a1c7cc52b834144d44a22583fff2d4144978e29f55a7e5a606501db171b50260dec739a44c90d6ecbfc20d1f9aba6baece3f4077d3df951485f277990

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
e68f8e4aafd0bcab569d804f6c529ee5

SHA1
10fc1e4cf1834f831a1c66084dc96dcf6d71bb8b

SHA256
e2f345772521a58411ae290f72824edeae12d77aacf10483a7730ef97fd56dd4

SHA512
7f991b02ab9ea9b46be880a9f6f7d7288e3ef40de2574e4c15cba208d74fb9cb48cd21d98352b1e3f0774ac4b1e8d389b18c288d09948d619d2ea28d1186236d

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp

Filesize
1.2MB

MD5
f96faa6ec671eaabc66ef44d5a715db2

SHA1
71b08ba07e5cea3490daeb4b75b4262b1e8a9821

SHA256
6beae61ac55708892f869336fbf24f5987b433d3abe54f00bb69a098715caa1f

SHA512
ab02f785eb412004de71337a016861e790c643bffb7b1ff87d3c7f62e9ebe139fb13b04c4605ff8f069e9e0eb032427e864a6d98af5b8e25fef770bb84272838

Download Submit
C:\Users\Admin\Desktop\Nava Shield.lnk

Filesize
825B

MD5
0d4372fe8ebd344fdb8e88733b2266e0

SHA1
96eafb8d49d93c12c573e290065a788d0c053041

SHA256
d0f34977d872f5e8ab7dee720ab5def5c123af0dca18da709b3770fc6716b83d

SHA512
363dc2eb797c235ee449ec3efcee14275cc57c2d9318088a96f5f175eb76369c0b99b58b61692884852c54a8779ced3d10f82e1b71b9cd938dd8617d61f58c94

Download Submit
\??\pipe\LOCAL\crashpad_4980_MQUVGUHDUWJVAUKY

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/1000-120-0x0000000002720000-0x000000000273A000-memory.dmp

Filesize
104KB

Download
memory/1000-116-0x0000000002760000-0x0000000002A7B000-memory.dmp

Filesize
3.1MB

Download
memory/1000-145-0x0000000069F80000-0x0000000069F88000-memory.dmp

Filesize
32KB

Download
memory/1000-115-0x00000000026F0000-0x0000000002702000-memory.dmp

Filesize
72KB

Download
memory/2200-153-0x0000000002560000-0x00000000026E7000-memory.dmp

Filesize
1.5MB

Download
memory/2208-151-0x0000000002550000-0x00000000026DB000-memory.dmp

Filesize
1.5MB

Download
memory/2208-149-0x0000000002960000-0x000000000297A000-memory.dmp

Filesize
104KB

Download
memory/2208-144-0x0000000002930000-0x0000000002942000-memory.dmp

Filesize
72KB

Download
memory/3352-570-0x0000021BAA560000-0x0000021BAA570000-memory.dmp

Filesize
64KB

Download
memory/3352-586-0x0000021BAA660000-0x0000021BAA670000-memory.dmp

Filesize
64KB

Download
memory/4356-127-0x0000000000400000-0x000000000047A000-memory.dmp

Filesize
488KB

Download
memory/4356-11-0x0000000000400000-0x000000000047A000-memory.dmp

Filesize
488KB

Download