ae32fec08c87ed5c92014daa7768bff84c8ca4c681a8a41e595e8e3ed6078ffc

Resubmissions

01-04-2023 20:59

230401-zs5ataeb3y 1

01-04-2023 20:58

230401-zr95nscf99 1

01-04-2023 20:51

230401-zm5z6acf76 6

Analysis

max time kernel
733s
max time network
934s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2023 20:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MalwareDatabase (1).html
Size

208KB
MD5

7a2b52c9da7f2839e44ad94c19f68d02
SHA1

1fccebdf5902b30466205af92c4c7f04913ec6d4
SHA256

ae32fec08c87ed5c92014daa7768bff84c8ca4c681a8a41e595e8e3ed6078ffc
SHA512

8c0093ee535aee332c13063ecae0f1df1148d0ff0e3e6b70cb37f7856a6629f2a705701a2d030a598bfe4ecc8f4151d1ca5abf3738ec87273f719cfbe9a1e15c
SSDEEP

6144:sTRgFloZVDuqJmq8NJaQU2SJxX520WLy63gS8SS89S8nS8m7Snr8cfJNhoy5gq9D:YRgFloj8NJaQU2SJxX520WLy63gS8SSS

Score

6^/10

bootkit persistence

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

[email protected]

description ioc process

File opened for modification \??\PhysicalDrive0 [email protected]

description	ioc	process
File opened for modification	\??\PhysicalDrive0	[email protected]

Drops file in Program Files directory 2 IoCs

Processes:

setup.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\b158457a-eed6-4fb8-b218-48fee6919664.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230401225652.pma	setup.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

firefox.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exemsedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeexplorer.exeIEXPLORE.EXE

description	ioc	process
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateHighDateTime = "31024364"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b049a2a0ec64d901	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\FileNames\	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateLowDateTime = "2500883796"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\VersionManager	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLHighDateTime = "50"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "2500883796"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000016b1b6fc7cfc59429b2ebf78760d5fe3000000000200000000001066000000010000200000007279425944ec01c8a07dc94f79d5d3d9a7748cc059c19d264b4cf3f221ffca9a000000000e80000000020000200000008915de003a4fbf6ba7ba03fc1407ca9686313e8cb9598ad65f4ff96e75d54ae720000000fc619b08d46a6a46a5beeed4fa700b124e9038919e97df658428b3eac5abd88240000000325ad670e00da45e62b461e27dc52ba9a52c8ac6281638696e87c25de27df64f980ed2efdda039fc6ea11c77f49e9ced3aeea91f439fa15f9683117ca31a8e2b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "387154469"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames\en-US = "en-US.1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31024364"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31024364"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames\	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{C02254DA-D0DF-11ED-9EF6-C2E0088FA829} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\IESettingSync	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLLowDateTime = "1251635200"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\VersionManager	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "2512638447"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000016b1b6fc7cfc59429b2ebf78760d5fe300000000020000000000106600000001000020000000cac1bb8fd4df307e98fd7456048028e2642afa80bf42c178c63f279c6b774698000000000e8000000002000020000000856cf4abb0ab56c2ca3fecdfdfb5eb7b643622a526236532eb547bedbf39df612000000036c089af6d4d55928159e2d8849cd7ba442f2b9e04de0e1ce92210adfe4932e340000000548b6d97de493020b15fbc26849bbf4bd77cc6fdcf461a3beaab7befa043158302aab690cf15eace36c6f3b4ebea8eb21735029be048dbfe9117c3a92edfd629	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0226aa0ec64d901	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe

Modifies registry class 64 IoCs

Processes:

explorer.exefirefox.execontrol.exemsedge.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-2#immutable1 = "Conserve energy or maximize performance by choosing how your computer manages power."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3000#immutable1 = "Sync Center"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\mmsys.cpl,-301#immutable1 = "Configure your audio devices or change the sound scheme for your computer."	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-1#immutable1 = "Speech Recognition"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-101#immutable1 = "Recovery"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\RADCUI.dll,-15301#immutable1 = "Manage your RemoteApp and Desktop Connections"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-601#immutable1 = "Indexing Options"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-1#immutable1 = "Network and Sharing Center"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4313#immutable1 = "Configure your Internet display and connection settings."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\Vault.dll,-1#immutable1 = "Credential Manager"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-1#immutable1 = "AutoPlay"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\accessibilitycpl.dll,-45#immutable1 = "Make your computer easier to use."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fvecpl.dll,-1#immutable1 = "BitLocker Drive Encryption"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fvecpl.dll,-2#immutable1 = "Protect your PC using BitLocker Drive Encryption."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-1#immutable1 = "Default Programs"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-2#immutable1 = "Configure how speech recognition works on your computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-2#immutable1 = "Change user account settings and passwords for people who share this computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-100#immutable1 = "Mouse"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-2#immutable1 = "Check network status, change network settings and set preferences for sharing files and printers."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fhcpl.dll,-52#immutable1 = "File History"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fhcpl.dll,-2#immutable1 = "Keep a history of your files"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-101#immutable1 = "Customize your mouse settings, such as the button configuration, double-click speed, mouse pointers, and motion speed."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-6#immutable1 = "Color Management"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-2#immutable1 = "Change default settings for CDs, DVDs, and devices so that you can automatically play music, view pictures, install software, and play games."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3001#immutable1 = "Sync files between your computer and network folders"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-2#immutable1 = "Recovery"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\mmsys.cpl,-300#immutable1 = "Sound"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings	control.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-1#immutable1 = "Power Options"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-2#immutable1 = "Configure your telephone dialing rules and modem settings."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sdcpl.dll,-100#immutable1 = "Recover copies of your files backed up in Windows 7"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\systemcpl.dll,-2#immutable1 = "View information about your computer, and change settings for hardware, performance, and remote connections."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-51#immutable1 = "Date and Time"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-52#immutable1 = "Set the date, time, and time zone for your computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\Vault.dll,-2#immutable1 = "Manage your Windows credentials."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12123#immutable1 = "Set firewall security options to help protect your computer from hackers and malicious software."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\devmgr.dll,-5#immutable1 = "View and update your device hardware settings and driver software."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-159#immutable1 = "Programs and Features"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-1000#immutable1 = "Devices and Printers"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-2000#immutable1 = "View and manage devices, printers, and print jobs"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\accessibilitycpl.dll,-10#immutable1 = "Ease of Access Center"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-10#immutable1 = "Choose which programs you want Windows to use for activities like web browsing, editing photos, sending e-mail, and playing music."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-1#immutable1 = "Phone and Modem"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-1#immutable1 = "User Accounts"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-102#immutable1 = "Keyboard"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-602#immutable1 = "Change how Windows indexes to search faster"	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12122#immutable1 = "Windows Defender Firewall"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-160#immutable1 = "Uninstall or change programs on your computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4312#immutable1 = "Internet Options"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-7#immutable1 = "Change advanced color management settings for displays, scanners, and printers."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sdcpl.dll,-101#immutable1 = "Backup and Restore (Windows 7)"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-15#immutable1 = "Troubleshoot and fix common computer problems."	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-1#immutable1 = "Troubleshooting"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-2#immutable1 = "Customize settings for the display of languages, numbers, times, and dates."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-103#immutable1 = "Customize your keyboard settings, such as the cursor blink rate and the character repeat rate."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\devmgr.dll,-4#immutable1 = "Device Manager"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\systemcpl.dll,-1#immutable1 = "System"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe

NTFS ADS 1 IoCs

Processes:

firefox.exe

description ioc process

File created C:\Users\Admin\Downloads\MEMZ.zip:Zone.Identifier firefox.exe
Runs regedit.exe 1 IoCs

Processes:

regedit.exe

pid process

4516 regedit.exe
Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

explorer.exe

pid process

7992 explorer.exe

description	ioc	process
File created	C:\Users\Admin\Downloads\MEMZ.zip:Zone.Identifier	firefox.exe

pid	process
4516	regedit.exe

pid	process
7992	explorer.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

[email protected][email protected][email protected][email protected][email protected]

pid	process
4140	[email protected]
5820	[email protected]
4140	[email protected]
5820	[email protected]
1712	[email protected]
1712	[email protected]
1712	[email protected]
1124	[email protected]
1712	[email protected]
1124	[email protected]
5820	[email protected]
5820	[email protected]
4140	[email protected]
4140	[email protected]
5820	[email protected]
1124	[email protected]
1124	[email protected]
5820	[email protected]
1712	[email protected]
1712	[email protected]
516	[email protected]
516	[email protected]
4140	[email protected]
4140	[email protected]
516	[email protected]
1712	[email protected]
516	[email protected]
1712	[email protected]
5820	[email protected]
5820	[email protected]
1124	[email protected]
1124	[email protected]
4140	[email protected]
4140	[email protected]
1124	[email protected]
1124	[email protected]
4140	[email protected]
4140	[email protected]
5820	[email protected]
5820	[email protected]
516	[email protected]
516	[email protected]
1712	[email protected]
1712	[email protected]
1712	[email protected]
1712	[email protected]
5820	[email protected]
5820	[email protected]
516	[email protected]
516	[email protected]
4140	[email protected]
4140	[email protected]
1124	[email protected]
1124	[email protected]
4140	[email protected]
5820	[email protected]
4140	[email protected]
5820	[email protected]
1712	[email protected]
1712	[email protected]
516	[email protected]
1124	[email protected]
516	[email protected]
1124	[email protected]

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

mmc.exe

pid process

3736 mmc.exe

pid	process
3736	mmc.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

msedge.exemsedge.exe

pid	process
3376	msedge.exe
3376	msedge.exe
3376	msedge.exe
3376	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe

Suspicious use of AdjustPrivilegeToken 22 IoCs

Processes:

firefox.exeAUDIODG.EXEexplorer.exemmc.exe

description	pid	process
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: 33	5792	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5792	AUDIODG.EXE
Token: SeDebugPrivilege	1072	firefox.exe
Token: SeShutdownPrivilege	7992	explorer.exe
Token: SeCreatePagefilePrivilege	7992	explorer.exe
Token: SeShutdownPrivilege	7992	explorer.exe
Token: SeCreatePagefilePrivilege	7992	explorer.exe
Token: SeDebugPrivilege	1072	firefox.exe
Token: 33	3736	mmc.exe
Token: SeIncBasePriorityPrivilege	3736	mmc.exe
Token: 33	3736	mmc.exe
Token: SeIncBasePriorityPrivilege	3736	mmc.exe
Token: 33	3736	mmc.exe
Token: SeIncBasePriorityPrivilege	3736	mmc.exe

Suspicious use of FindShellTrayWindow 11 IoCs

Processes:

iexplore.exefirefox.exemsedge.exemsedge.exeexplorer.exe

pid	process
824	iexplore.exe
1072	firefox.exe
1072	firefox.exe
1072	firefox.exe
1072	firefox.exe
3376	msedge.exe
3376	msedge.exe
3376	msedge.exe
3376	msedge.exe
3048	msedge.exe
7992	explorer.exe

Suspicious use of SendNotifyMessage 3 IoCs

Processes:

firefox.exe

pid process

1072 firefox.exe
1072 firefox.exe
1072 firefox.exe

pid	process
1072	firefox.exe
1072	firefox.exe
1072	firefox.exe

Suspicious use of SetWindowsHookEx 35 IoCs

Processes:

iexplore.exeIEXPLORE.EXEfirefox.exe[email protected][email protected][email protected][email protected][email protected][email protected][email protected]mmc.exemmc.exe

pid	process
824	iexplore.exe
824	iexplore.exe
544	IEXPLORE.EXE
544	IEXPLORE.EXE
544	IEXPLORE.EXE
544	IEXPLORE.EXE
1072	firefox.exe
1072	firefox.exe
1072	firefox.exe
1072	firefox.exe
4732	[email protected]
5820	[email protected]
4140	[email protected]
1712	[email protected]
1124	[email protected]
516	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
7644	mmc.exe
3736	mmc.exe
3736	mmc.exe
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]
1716	[email protected]

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

iexplore.exefirefox.exefirefox.exe

description	pid	process	target process
PID 824 wrote to memory of 544	824	iexplore.exe	IEXPLORE.EXE
PID 824 wrote to memory of 544	824	iexplore.exe	IEXPLORE.EXE
PID 824 wrote to memory of 544	824	iexplore.exe	IEXPLORE.EXE
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 4716 wrote to memory of 1072	4716	firefox.exe	firefox.exe
PID 1072 wrote to memory of 3468	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 3468	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe
PID 1072 wrote to memory of 4280	1072	firefox.exe	firefox.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\MalwareDatabase (1).html"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:824
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:824 CREDAT:17410 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:544

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4716
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1072
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.0.1628203931\1416740379" -parentBuildID 20221007134813 -prefsHandle 1852 -prefMapHandle 1844 -prefsLen 20890 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d98c8713-befe-4dd4-b8de-aac55691c572} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 1932 2b7ece17a58 gpu
    3⤵
    PID:3468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.1.1379046260\1699817125" -parentBuildID 20221007134813 -prefsHandle 2320 -prefMapHandle 2316 -prefsLen 20926 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffc28cfb-62ba-4e89-bc81-37622f2c4fe7} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 2332 2b7dee71058 socket
    3⤵
    PID:4280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.2.1889092830\290910767" -childID 1 -isForBrowser -prefsHandle 2964 -prefMapHandle 2980 -prefsLen 21009 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e729bc60-96ca-43ec-830a-43dbcaf391e3} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 2976 2b7ebd93858 tab
    3⤵
    PID:1040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.3.1581525451\1649361471" -childID 2 -isForBrowser -prefsHandle 2488 -prefMapHandle 2484 -prefsLen 26519 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c62a5943-1adf-483e-8380-040a9a7c255a} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 1132 2b7dee6fb58 tab
    3⤵
    PID:4976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.4.241525291\1981381413" -childID 3 -isForBrowser -prefsHandle 4112 -prefMapHandle 4116 -prefsLen 26519 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33d7b55a-0a5c-4e9e-b6b7-0baa29975931} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 2488 2b7f0e68f58 tab
    3⤵
    PID:1968
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.7.1781687064\1849692253" -childID 6 -isForBrowser -prefsHandle 5312 -prefMapHandle 5316 -prefsLen 26659 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c9c1412c-bb9d-4705-b138-08b591178de9} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5304 2b7f243eb58 tab
    3⤵
    PID:5280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.6.1052971043\679428205" -childID 5 -isForBrowser -prefsHandle 5112 -prefMapHandle 5116 -prefsLen 26659 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {18ea11a7-cc19-4284-a8af-75b88e590c53} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5000 2b7f22da158 tab
    3⤵
    PID:5272
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.5.96740080\1601578502" -childID 4 -isForBrowser -prefsHandle 4996 -prefMapHandle 4896 -prefsLen 26659 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ee8efb5-e370-45bf-9c86-d2b9f29f8e41} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5004 2b7f11c6f58 tab
    3⤵
    PID:5264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.8.865495344\210142226" -childID 7 -isForBrowser -prefsHandle 5716 -prefMapHandle 5184 -prefsLen 26738 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ef9078c8-cb4a-49e3-9725-0f25306fe1f4} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5144 2b7f2e3c558 tab
    3⤵
    PID:5872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.10.2057600370\1282281066" -childID 9 -isForBrowser -prefsHandle 3552 -prefMapHandle 4080 -prefsLen 26930 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3ad45de1-da99-4ecc-b271-379ce1dfb1cd} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 3904 2b7f3ccf158 tab
    3⤵
    PID:5628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.9.1204578074\1234903013" -childID 8 -isForBrowser -prefsHandle 2800 -prefMapHandle 3304 -prefsLen 26930 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {49fedcac-784d-453f-8218-57916ebdbd24} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5928 2b7f3cce258 tab
    3⤵
    PID:5616
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.11.210129778\1882563455" -parentBuildID 20221007134813 -prefsHandle 6132 -prefMapHandle 6136 -prefsLen 26930 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4f382e84-9405-4d36-90ca-516ba55c3b5c} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 6044 2b7f41c0758 rdd
    3⤵
    PID:5844
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.12.1940083221\600546372" -childID 10 -isForBrowser -prefsHandle 5056 -prefMapHandle 5100 -prefsLen 27195 -prefMapSize 232675 -jsInitHandle 1492 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1896a65-b901-4ae6-b30f-092f6bf4f292} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5176 2b7efa20c58 tab
    3⤵
    PID:5788

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2016

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4732
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:4140
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:1712
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:516
- C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /main
  2⤵
  - Writes to the Master Boot Record (MBR)
  - Suspicious use of SetWindowsHookEx
  PID:1716
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe" \note.txt
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
    3⤵
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:3376
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:3412
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
      4⤵
      PID:5612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
      4⤵
      PID:4812
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
      4⤵
      PID:5840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
      4⤵
      PID:3048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1
      4⤵
      PID:3068
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
      4⤵
      PID:4540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
      4⤵
      PID:5048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8
      4⤵
      PID:5652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
      4⤵
      Drops file in Program Files directory
      PID:4348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff6400e5460,0x7ff6400e5470,0x7ff6400e5480
        5⤵
        
        PID:4624
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,13641750817578846986,7112761701791642597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8
      4⤵
      PID:2044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:3048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:4864
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
      4⤵
      PID:2536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2948 /prefetch:8
      4⤵
      PID:4536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
      4⤵
      PID:5856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
      4⤵
      PID:3392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
      4⤵
      PID:184
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2260 /prefetch:2
      4⤵
      PID:5796
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 /prefetch:8
      4⤵
      PID:4204
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 /prefetch:8
      4⤵
      PID:3332
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
      4⤵
      PID:4468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
      4⤵
      PID:4028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
      4⤵
      PID:2872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
      4⤵
      PID:3068
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
      4⤵
      PID:5908
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
      4⤵
      PID:5516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
      4⤵
      PID:5532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
      4⤵
      PID:4592
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
      4⤵
      PID:3976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
      4⤵
      PID:3392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
      4⤵
      PID:4056
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1996 /prefetch:1
      4⤵
      PID:4356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
      4⤵
      PID:1396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
      4⤵
      PID:4440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6624 /prefetch:1
      4⤵
      PID:1944
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
      4⤵
      PID:6392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7228 /prefetch:1
      4⤵
      PID:6708
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7464 /prefetch:1
      4⤵
      PID:6752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
      4⤵
      PID:6908
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7444 /prefetch:1
      4⤵
      PID:7144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7660 /prefetch:1
      4⤵
      PID:5392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7856 /prefetch:1
      4⤵
      PID:6264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8160 /prefetch:1
      4⤵
      PID:2672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=9064 /prefetch:8
      4⤵
      PID:6916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8992 /prefetch:1
      4⤵
      PID:1984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8740 /prefetch:1
      4⤵
      PID:6416
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8620 /prefetch:1
      4⤵
      PID:2064
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8476 /prefetch:2
      4⤵
      PID:5484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1
      4⤵
      PID:6872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1
      4⤵
      PID:6796
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8876 /prefetch:1
      4⤵
      PID:4928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8568 /prefetch:1
      4⤵
      PID:3240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8976 /prefetch:1
      4⤵
      PID:7156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8864 /prefetch:1
      4⤵
      PID:2776
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8500 /prefetch:1
      4⤵
      PID:6244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8900 /prefetch:1
      4⤵
      PID:6848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9416 /prefetch:1
      4⤵
      PID:1000
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
      4⤵
      PID:6188
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10004 /prefetch:1
      4⤵
      PID:6256
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6728 /prefetch:1
      4⤵
      PID:7756
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10424 /prefetch:1
      4⤵
      PID:7772
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9044 /prefetch:1
      4⤵
      PID:6400
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10588 /prefetch:1
      4⤵
      PID:3448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10808 /prefetch:1
      4⤵
      PID:7316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10980 /prefetch:1
      4⤵
      PID:7304
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11132 /prefetch:1
      4⤵
      PID:7856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10728 /prefetch:1
      4⤵
      PID:2784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11404 /prefetch:1
      4⤵
      PID:1256
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11620 /prefetch:1
      4⤵
      PID:3120
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10076 /prefetch:1
      4⤵
      PID:3900
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11124 /prefetch:1
      4⤵
      PID:1620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
      4⤵
      PID:7180
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10448 /prefetch:1
      4⤵
      PID:2196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10952 /prefetch:1
      4⤵
      PID:8012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11808 /prefetch:1
      4⤵
      PID:5752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11876 /prefetch:1
      4⤵
      PID:3800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10592 /prefetch:1
      4⤵
      PID:7364
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12084 /prefetch:1
      4⤵
      PID:5752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11668 /prefetch:1
      4⤵
      PID:7288
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10404 /prefetch:1
      4⤵
      PID:8112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12280 /prefetch:1
      4⤵
      PID:6636
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10716 /prefetch:1
      4⤵
      PID:7212
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12204 /prefetch:1
      4⤵
      PID:6268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10068 /prefetch:1
      4⤵
      PID:3084
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12252 /prefetch:1
      4⤵
      PID:8456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12384 /prefetch:1
      4⤵
      PID:8784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11304 /prefetch:1
      4⤵
      PID:8868
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10688 /prefetch:1
      4⤵
      PID:9068
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12264 /prefetch:1
      4⤵
      PID:8420
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11660 /prefetch:1
      4⤵
      PID:8616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12624 /prefetch:1
      4⤵
      PID:8680
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12768 /prefetch:1
      4⤵
      PID:8216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12496 /prefetch:1
      4⤵
      PID:8260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12340 /prefetch:1
      4⤵
      PID:7172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12968 /prefetch:1
      4⤵
      PID:8396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12248 /prefetch:1
      4⤵
      PID:2540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12316 /prefetch:1
      4⤵
      PID:7512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10688 /prefetch:1
      4⤵
      PID:5528
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13352 /prefetch:1
      4⤵
      PID:8988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12440 /prefetch:1
      4⤵
      PID:8144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12604 /prefetch:1
      4⤵
      PID:8884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13712 /prefetch:1
      4⤵
      PID:7916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13524 /prefetch:1
      4⤵
      PID:8440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10368 /prefetch:1
      4⤵
      PID:7536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,3583043177849163497,6269893298158370187,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13576 /prefetch:1
      4⤵
      PID:8300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
    3⤵
    PID:3752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:4052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
    3⤵
    PID:4888
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:5464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
    3⤵
    PID:224
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xfc,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:2316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
    3⤵
    PID:4412
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
    3⤵
    PID:6704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:6836
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe"
    3⤵
    PID:7096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
    3⤵
    PID:6888
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:5864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp
    3⤵
    PID:6196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:5268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
    3⤵
    PID:1032
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:5824
- - C:\Windows\SysWOW64\control.exe
    "C:\Windows\System32\control.exe"
    3⤵
    - Modifies registry class
    PID:7928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=g3t+r3kt
    3⤵
    PID:7640
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xfc,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:7688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
    3⤵
    PID:7700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:7788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
    3⤵
    PID:6192
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xf8,0x12c,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:3248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
    3⤵
    PID:7848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:3668
- - C:\Windows\SysWOW64\mmc.exe
    "C:\Windows\System32\mmc.exe"
    3⤵
    - Suspicious use of SetWindowsHookEx
    PID:7644
  - - C:\Windows\system32\mmc.exe
      "C:\Windows\system32\mmc.exe"
      4⤵
      Suspicious behavior: GetForegroundWindowSpam
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SetWindowsHookEx
      PID:3736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
    3⤵
    PID:2248
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0xf8,0x134,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:1424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
    3⤵
    PID:4480
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:3396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp
    3⤵
    PID:7568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:2132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=g3t+r3kt
    3⤵
    PID:4252
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:4164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
    3⤵
    PID:2196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:6272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
    3⤵
    PID:6548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:8184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
    3⤵
    PID:8708
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:8720
- - C:\Windows\SysWOW64\regedit.exe
    "C:\Windows\System32\regedit.exe"
    3⤵
    - Runs regedit.exe
    PID:4516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
    3⤵
    PID:6156
- - C:\Windows\SysWOW64\calc.exe
    "C:\Windows\System32\calc.exe"
    3⤵
    PID:9100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
    3⤵
    PID:6436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:7968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
    3⤵
    PID:9056
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0x9c,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:9068
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe"
    3⤵
    PID:8452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
    3⤵
    PID:8816
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:8836
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe"
    3⤵
    PID:8520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
    3⤵
    PID:7236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:7304
- - C:\Windows\SysWOW64\control.exe
    "C:\Windows\System32\control.exe"
    3⤵
    PID:4660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
    3⤵
    PID:6780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0x11c,0xf8,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:3724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
    3⤵
    PID:8564
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:7436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
    3⤵
    PID:6124
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0x11c,0x12c,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
      4⤵
      PID:8792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5856

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3136

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3572

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x384 0x494
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5792

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:7992

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:8140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
1⤵
PID:8496

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7172

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Web Service

T1102

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\69C6F6EC64E114822DF688DC12CDD86C

Filesize
779B

MD5
9384ab7f52e0e78d1d16a44577f4a394

SHA1
ef6bd7d905251a84fc9c8855677d7a374e00a381

SHA256
805a55c4aa3a02174c5c96e8a7ad2c47f45b151cb87a3a6f89da7cc17b4a4fc8

SHA512
9f8a0786b55f02c0279e9bef90068a34c2cc2713b103a47fbfa13825942e0835d25c2f837bc34b2f31859fa14c888a403c6b30926ad2332ae6ef9b222c1fd8b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\69C6F6EC64E114822DF688DC12CDD86C

Filesize
246B

MD5
fbbd88de1c9032aef005cc93f5c3f00d

SHA1
316a77e8786a3a1b3e7ac2e08c2bd3fdf2022f3a

SHA256
06b6762c4d06f66d9bd7709432f8cca76d040b9fb019b159d9a2bc642405d870

SHA512
a444af5ec0a9c01c30a1a96f9fef1e1a7ddc96ddcb50d76facd410e1977d31725a88f58b5954f64735598a20927d11ad614b5bf48374e92fab0b90fd5ab3ddee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
78c7656527762ed2977adf983a6f4766

SHA1
21a66d2eefcb059371f4972694057e4b1f827ce6

SHA256
e1000099751602ae1adcec6f1c74e1d65f472936817b45239dfed4b043984296

SHA512
0a8e58ae95163b3cdf8e81b5085887761e73cb7c836a1a6a972e837fb3df69b2ac70cfd6311d06d40656344ec35eb48e512f007561480f0345486ac2b329be0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
099b4ba2787e99b696fc61528100f83f

SHA1
06e1f8b7391e1d548e49a1022f6ce6e7aa61f292

SHA256
cdb1db488e260ed750edfe1c145850b57ee8ab819d75237a167e673116a33ee8

SHA512
4309375e10785564ceb03e0127ced414e366a5b833f16a60d796471d871b479e4c044db5268902d9dfd14715ca577cb26042bab8f7b0f31fe8abf33947feb9d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
51f45e5218334be28303f404044f02fe

SHA1
e3d06720fe7b29f437ad82962be07fcc3ccea390

SHA256
377de9a936f9de7a5d62b07e657e72e87b83ebb4c706b1b3e7b16fb725b0399c

SHA512
52fdacecffc82d87fe1227933da14fe7e9a13ecf4f37f61360c03c259461e8601c2e7d6a484afa41e7591fe17522f99c2b2b40be215e0a540f3dc39892689733

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
51f45e5218334be28303f404044f02fe

SHA1
e3d06720fe7b29f437ad82962be07fcc3ccea390

SHA256
377de9a936f9de7a5d62b07e657e72e87b83ebb4c706b1b3e7b16fb725b0399c

SHA512
52fdacecffc82d87fe1227933da14fe7e9a13ecf4f37f61360c03c259461e8601c2e7d6a484afa41e7591fe17522f99c2b2b40be215e0a540f3dc39892689733

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1f01ef6cc1d8bb1cd4e0c66d6cbac626

SHA1
f3c3825d21c52311be36d0c968da299a66b4cf00

SHA256
4cf053512e1e634984d64478d8b58833a5caba191608d300202900b67d82b0f4

SHA512
4be5d64307a807ad4a5d8bbc027bb1598b5b0dae48350370ff2f852a970c3d6cdbd470d1c7d89661b801af97c692206dce82bb71a5329bc36d9b289ace1cf0f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_0

Filesize
44KB

MD5
37b6b9940f14a7d17c4e6bcf8f0aad8b

SHA1
06cb15f535b3977099226ae982cbc31687409667

SHA256
997b605e865220b5bbe87eeac404fe5e469fa78f1ebc1bc20dcb80332e192864

SHA512
66b74ba3e0ad8e4dac6fd485efd7d13bbe4870c2235a73d98e3b4f4100b3d2793902693335e04d3ea49086d1815a0de0743b28c745e8dcbaa0958bbebb6ca35e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_1

Filesize
264KB

MD5
e2fa2f2ba255bb8e8bb66cde365d56d6

SHA1
c99d2d8f66ade718d434d41c37eafb8b23b5937c

SHA256
ed6f821a4a7e55ec80798d5bbf2a3e88d60b8df85b1ae2c9ee9d67ede6f8b399

SHA512
454825fd6a5bfa6a06e6b60f6e0e5496e395fb82f6d69b3230c63308973919e31aca3263f82176c04008042e78298c25c8d21ebd0d32a01b4f029169f7c822b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_2

Filesize
1.0MB

MD5
ba75511ecfe0e618d449a83bd738a8aa

SHA1
50a848ce99a3844b869c89494da98b776b2acfa6

SHA256
65a6ad83572ae2795d9d36b6a12b69d29f329c6aeeb4a7c001e12dacc4ff1f5f

SHA512
146089be373d635a032f610af7dca7d0740dd2cc7ae7c7b1efc28545ecad69c4ba5b9b06f8092ed20cb10171106121b24259ad9bc32c55282538a3258ec4d0f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_3

Filesize
4.0MB

MD5
61e6291402b31862c640d1cd4e929542

SHA1
e661131f1c07ab95cc923e1c66d288c924f8a387

SHA256
c14f1bae62939025e3aec2e9189b50790e3b6ffa6049fdba91efe062a1438e2f

SHA512
fcd7d74b5bdb6a71485baf2a51cf3a72ad260be4dff44ec09ddf9ab4876aee50e0c16a3d1108e63979620ec85fefc98d0bf88c9bd60f226f625792ebf3b9b67f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
50KB

MD5
40333c9d07daab8ba8a53f73ee3f974e

SHA1
36c2b17a7c48fc28036534f445b79fca9658f0a4

SHA256
998313664fbeab2403238a77e6c50a4541d20805b30533f67de1a12c624fee54

SHA512
4a893bf97a02f88a3ea7830b5f72eb56295566a2c6ceafa33fd80f74f81edadbb4172f71c0e12e4a06b1e927f9d7b0cc62c5ba070cd50f3f25c8b670a1270de4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
35KB

MD5
fbf149f3cc52c0e994c22360da1fdc3c

SHA1
71c4a5d6a47d01dcb40c659951b5ce38faf1fef0

SHA256
53e46cc83cf44a5dce1b018be9011952eb7714f2949757cfa2e3efde44112dd0

SHA512
9046410e4bc370c68e98c5c00875469bf667cec7bfb14046df5a8547be292153d3621da4f1bc4ed583b044f739a3e56dd9f0fc70bd79196568aca2949501d1e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

Filesize
27KB

MD5
13c084c4f63481ee06154f3e54d18841

SHA1
5f71dac2cb19e806b6a0bb5fb4e1e12ccabd7daa

SHA256
2d91af55f2ebb790a22e692110856d579252cb0d55530d284ef000867ae9d359

SHA512
563c6b7da8c65e680b8feb79a3fb81b273be96a474dccb4bfaec754aafe5f7a2b85162bb3ee5fef92b76ce1feb25f6dc6729fa691110222f02f496022cc2130b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

Filesize
19KB

MD5
ca7fbbfd120e3e329633044190bbf134

SHA1
d17f81e03dd827554ddd207ea081fb46b3415445

SHA256
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

SHA512
ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

Filesize
123KB

MD5
861e007a18532662b46710ae686a3618

SHA1
a3a2945ba8ce9eb57bbf6956db85190e0bd0b398

SHA256
cdd81629b7d9084f338c45da26eaeb10347cb48b2b38338f41b01adb6fad55b0

SHA512
4bdcab86b291c41748a81f08d6154da2eeef9cb7b250eb1f93fe5e17b721e0f90d72770b4cb6466343eef33530df01a67503988fdc8f5bb25a93f893ba60c924

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

Filesize
61KB

MD5
a0efa5ed4d2876e063ebceda6a5ee1a2

SHA1
06c14bce0a9dad23ab9a94cb976c1acaea052743

SHA256
ada73543baaa7b64d16deb817b39b984d7cff5cd624948c5106f9cb1c8af21a7

SHA512
f6898665ac8b7e20b6d613d7409d5e819c5a6af123ac512f9fc72ba135666b4fad18eeb8369c7ea6ab4a7e1a8671c67337c30e90166a2219867a4d6cceb8a9de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

Filesize
54KB

MD5
a49b27a104000d4290acea1536314480

SHA1
6e0e98138385cadcdf7ddc6fcacc0642f2449544

SHA256
489b26272c6797f569160a723adc9e1f3fe3b452c6445acfd0d1ca362eab507b

SHA512
2285f2b049db7fb3f7dc18b440002d5ab7fdaf0811e29a74b4b2679de6b769a46ee54e83812a1740a4a339edafe1ef4344bdf52dbab7973f33c52b1e4e302ad0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

Filesize
34KB

MD5
66902cc0c5aa9c4665c07a07764d0ef2

SHA1
ddf5d809425709698b17e8153fea9655569d46ef

SHA256
c65c55eb60af5dd6616ff17fba283ff04c6bf486e6f161984ea5d125392f01c2

SHA512
f36f591b08dd4ee177eb7668cb23df06e2ea9f13bf859f9f3fd630fd6d6f549410ff6d2978dcb96a40aa6ba441889f74e7e387029da5a6c9b8be2931b6645ea0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

Filesize
16KB

MD5
4ed9ae58f3e2094afbd1cdf75c6e33fc

SHA1
047323c3215b3af488208455de8757c66c33845a

SHA256
d032eab6a45e54474762e2ef94ce266e80616f68cf48e06fb9aeeee1f3ed38c5

SHA512
9c82903fd84d6e9b4a936dd861f97f09d885f508bb39917f6af2c7768c5dbe5be4c61a980d4024c577b935efe777ea0fd47d884df45f840f395bb74890ba534f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

Filesize
51KB

MD5
013a109a8196fedf11a05ba9e5d41b46

SHA1
4f1614e54c9f1a87d0a8bf4ab1811f69bb3f4a63

SHA256
77009d484705bafa37ef03cd859d3e48261d39b2b6c6bd0462b5bc243a90b52c

SHA512
8cdbe07fa46b6dd77a8d41ed66bee077bc336f0e57bfcf0cced03b0a1338a765ac7c7dbc504fb7fe7971c2e691187e5e7c4ab4b7d6b692f80f1ca82b987bca67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

Filesize
188KB

MD5
5d7da8d7d9aecc21cbd12c7da206f5f0

SHA1
158cd8529466e0cb10ccdadbecbf34129d1f78d4

SHA256
5231fb8820d77e72df8206060921cc565835eb316533539755dd4538b0853497

SHA512
dab7385dd7385a7c3b01aea19700163ff56073cd99fb7f823a5115cb19a0fdb653b632359472012097dee3e7bc27bb9f8f7b1b5f2241ee1e48e3e99ab3e90b2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

Filesize
17KB

MD5
3645eade56ce40afb141b3908bc1fb33

SHA1
6d7d199d4dba7f1adaaf3b0b9cf30c4f4ef47100

SHA256
2230557723188ef677fc6a0688ec83ed89461b310d842d4e67bd4fc4bc4754f1

SHA512
e26831545bca9ac5e73fab400bb7c0d8987dad3c5d2573138eef6cf3431239ad5fbca04beb105b4e1f590a4b96caedd3c56496989fd53f0a36e5e7b44e1bec3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007d

Filesize
250KB

MD5
425bd3aa2d06ab30294a2a4b8dc77f7d

SHA1
bcdbadbcbea0cf411aacedd577a156158741e75d

SHA256
0aa4b5a3b37ac118c77d8a76112da7a28c1839a2e01722d517a606bd32d40a1b

SHA512
c786640dbf09b37d982da9e285b98ca25e30dd35c7dbb56492824224443d7349c82a3e3ab0384b62cd10a6f93d2402f807ee109f05a34dfc56a7e420d58f818d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000085

Filesize
25KB

MD5
a7f66fb0251608d86ea3c4585e3172a7

SHA1
8f0a5da33d71f0dae0f3ab95341f20618df5ccbf

SHA256
6cc9841dd2233826a472253a2b8cd5cc81fd93e03241b003bea07e5d187d93f8

SHA512
eb880c4280bf369ee57e553a3760f0a1dab38196df99946fd0be6820a3ceb9da91c3b96944def2218bd3ae2d57afdacc3394a311c2edad2ba3747b91d058606a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000097

Filesize
29KB

MD5
f896f5d682482a28b6d8ac3eb5a11136

SHA1
a0c401c36a08cea5a27f93ec2c80fe4355941bd7

SHA256
148306745cb8143d121930f7304100c79b341087ec0191a5d5b4bff732d0a79a

SHA512
ddf22f80a3a737d67f6bb8715d469be0dca02ddc0f9846e0fe745f66e6d265c429e36817e22fd3243ddb9695a31e2ef6765a03abacc39d82b53dbe3280d6b385

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c4

Filesize
20KB

MD5
b2d47a866f70ceb2b8e7fed5c83f5a37

SHA1
227ad625bb7eed0576e6e782d865168d4c6e0782

SHA256
fc9744feb233dc2992153df581f767f7939cff8cec412434493c2c8849e8bc52

SHA512
4d2b9b54704c5f18e9205e2b266c9365585969a9e3a808c0abc5b314749fc4d503c3244ca1cf4700162ac14505fa424de0ce794f8e38797d5fa40ea394aa6ac7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000db

Filesize
44KB

MD5
4a2766e8efdd4e4081135990e847fc85

SHA1
e132bc4efc3c4f89b9e1cc316e837a7ff4806226

SHA256
8211f6639cd77faa79d985149cd2173b618b76949294199e230f07463c32ddc7

SHA512
d01ecafd4244a87b5272929d0c04ca20cca664621b1ef7535ad4abecf042f9537eafe26e4f035a2034e88090625554d68614c330e32b2b576da27fa2122630ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dd

Filesize
279KB

MD5
aa517cd1afc9c2a63f6c26d2cf6c086e

SHA1
64e13600deb91923da7ba0a28bd308002dbbbe49

SHA256
55cd52104be7625be81f428743caf187c2d6311dc41b31e2339b865580377c99

SHA512
54558bc6e9f05813ccdc4479fdc1188451a8ef11239dd2ed7b4740f90a3cb7099ec4d21c3ebf51857c03c570f516568fe61917c37593bc279525435b672b72e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ea

Filesize
50KB

MD5
607ba5131e5e344c9087137060260054

SHA1
8c06e2f92530b14340e225891f3bd0c8b063b6d9

SHA256
70a3f7da5ae0b9da7c6114315deba08ee730e19777d41f4aec532336fdcb5922

SHA512
9df3735a665191b316a916c47734088957b02f42f4df194347989fca27bcae44202582fcbdd8c93710c1d75350a5f9c5d6d763824086c7836e6011c6326bbc06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\index

Filesize
256KB

MD5
3af124014511b2d303c17f02378e30a7

SHA1
9287016f85cf680142c4588c593ff78cbf5519a7

SHA256
9a332de41955100dc807b2fab0df0ab19fa531a35053af2a5417bac90d0f5ff8

SHA512
d11bd1f997fe7b68e68f60aff3d5a02cea04c502bd50c705c33e57e77ae676ec7b4a9ad4b99750f33b6476085f226fe2a2eda526dbb044ed9cef7d5a938d10e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0c1300763f7f947b_0

Filesize
16KB

MD5
064c3cd95ac77949a461b60015686312

SHA1
e847050046eb2bb354b50c273aaac13068813cfd

SHA256
8f0011fe3b8b3d5ca26f2c453336c13b84746e372aa95b02fe51904a6dc481c6

SHA512
59aea04e50e53d5cdfd831d2f4de0b174342dd456fb0f23484215f7c7638572d4fc90eb9ee8ad32211854df8cb4a1ea5bf378f7680e0fd71cab8debed3ff1e37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d55ef3be45ac437_0

Filesize
105KB

MD5
b48913aac22f60707907bd59349eb5a4

SHA1
ff7da54320fde3b6c863379faae1bc21cae846a4

SHA256
25deff6d23ab10d1528faf65fc35b8e72d0501fa13c57c4f177b55fb9ef1adb8

SHA512
5ab3ed74ea85c9206d6d6450d0f4e189e832d5a61ad03c4c8c66959163b00525a4c8027ced3c266ff4daa741db9c6101501744b518ff4498b74b3617602bc19b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1e65baceba1ee4cc_0

Filesize
572B

MD5
8e7cb88e041c308283a916668e08a99a

SHA1
0442295d52633d722c32e8dd3bc8ddfe0f8b07dc

SHA256
2d8df2329df5a700bf9f49b959529fb77d3f79a084a6a914d8704300efae19ba

SHA512
302a4da61309238ddbe78d9ea65cc841377125526242d285e8c582781a13a0e30590d488c4d561aca5b06e345d7d7b6d21ec32d1e46b0ea51bebd6f306923af9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\23ddc4bbe4c85eae_0

Filesize
413B

MD5
b620b9ca8bed3b2e8a876be6fe6fa18c

SHA1
3b107d0aa554b7b7eb8ebe9b966127bd1e2c9b6d

SHA256
d668e7090d3e16b168670cdae870e23474af477997061763e7d98902724899c2

SHA512
951f16afc2e3bd44c0ae65205394a25aec919898931cf80709eea2c88a5720287f91d96f0c7cf241501781fee2e0dc35a7c15353a45718d7402b9a44826b3b49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2747b49265ce823f_0

Filesize
16KB

MD5
a8f652aeff7c8381f7f950a05e42a450

SHA1
796d9c3f9573ca3df2d7cdc81f0247885a51301f

SHA256
2a985a7a1c63942919eed29b096f9af539c1414f5df2568bfdc6f59d47edc925

SHA512
f08e914d4c2b04fdc4336cc4e50f92213f8e55c1860fdcee836e58b3be520ae82843c0bacc630ac9923200b4da7c4b39385041edf78cc98601cf66a1450caf8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0

Filesize
7KB

MD5
8dbb45914892057eae6c5ea8e52d3554

SHA1
854441a45d67acdc1da5f16ad5b2db3dc51192de

SHA256
97b718e4771262efde1ee405cfd1b3b2994cb5fd3fe5bfbad4e0a37ca9afb7cf

SHA512
bc346e419248bbccbc6d34f788072c8f6ce55986d33e0e4be22b37a99c6500eeb297798ce5993f6eb64bcdf22de467f1414b740de4ae3db5a855913c480693e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48928a564fe6558d_0

Filesize
286B

MD5
ee6acda481fb7aaf9c542d131eb1c7b9

SHA1
f99d04236ee23a17589dc6ae71593906c203e824

SHA256
fb720b891a847e145660778a7e227d351a1c2fb8c8d4e9f3f6b8ec4644b3dafb

SHA512
003d3a032c5f793f2067a50d61b61538eeb2350a03c4ce8d59429e463d9e2147a3046cce01b7db14debfb2f1ea8c82fc311ec645441e713589ab30d87ced43e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4aa4edbed5cf308e_0

Filesize
2KB

MD5
30219dae8da35d4af11fa47480468f25

SHA1
24db2316d40307a7891923517dde3f97d42cc0a5

SHA256
ce0b2bfd9d99ddc567013aeb806bd30b0a6737c88ad815d2bad2528669135d0d

SHA512
0719a1b28b782a70b703a024871831cd812d5ba19f983946b6908210a960be782f862d35598bfe21cedc12cd7075456950701cdb62c6e595c59f0e28eb491770

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ccae0f086ff811_0

Filesize
388B

MD5
3aee7c0c3dcf1f8e9abe29eb369ac1ea

SHA1
11d3474ff443f7beeed35bb5aec95942ce9bbc1f

SHA256
0e261f9c0890089896cb0c3a251e9e16bea97d9613f447af22546ae78a1f1f88

SHA512
7d4fbac7298dd1613bcf6fc634ae531dbeb1905e9e27c5691613c2a42c4c8f76434f35e985819ab4963bc2bda4357641b3fa0b3c86ff132358c2492c0da7502d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5e22443ae45f6c23_0

Filesize
1.5MB

MD5
26bcabda89e8b55b08be6e166ad45316

SHA1
72bfcdc8b8473dc579b29a0c9cdc0366b3803f67

SHA256
06aeb66cdf63bc86781b88c34714f0f907d4612a1a56b48f592b91ddec45265a

SHA512
309f723a7b02c6a7d16c6d5db8ea47d0a3a789984b5fcee9b99bc8f5eb812ec0ef366a872ebce326d75562c11ee74e933e31b2d8a190c768d21ef9421e376a54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6a9a87d9f4fa6fe5_0

Filesize
8KB

MD5
462899edf3b00179cd2ffa36a2b4679f

SHA1
72fd1ebde90b9731e03d96aa97e79c4c726e756b

SHA256
5a80622396dc861d0ffda53e94d75fa496f5831e292d26a2ebef5d1f34effa37

SHA512
aecead478b5165bc00bd62d5116c96287feb12292cc7fef100414aa1c8f55ceb30ff0f21c147f586504e1b2936c0f20e4b7b78f6e4969e8a1e6ea46255405a25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6fdd29f372cde0e9_0

Filesize
8KB

MD5
24d97d490b89e4f06d1d2fda59567b97

SHA1
e4ee453a9cb776fb86f0bb3fde51259668e48671

SHA256
e636365ebeaf03da3874eb2d3f1c4b453693bd7c18b35790b5a06c6819e2b581

SHA512
86d185744f7a37cf6e912ec3cd5507b50d559d7cfcd7692581ba3d249a9c18fc876d5184052e23efe32e66862a8bee842177c5c2a63cfed51885aca1cb8b69c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81adfbd40c30719b_0

Filesize
500B

MD5
1d973ae4413521021656714ccce54f86

SHA1
19a9581a301627196a0a68c97ce38beced8d0acb

SHA256
1ead78a10c5f791cb1dae43a9afa9e549a54de27324c816a3360a05ed78d2b38

SHA512
436a8742186669ffc6c7b128edc5dd155c91ba7b3ff2f0c56450e0ae8a2f1c9e7fa09c60b3c52e6eb115b4418bfeb55d9e6990ba846b1527702c170d2daa3811

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ed11bfad34ecba1_0

Filesize
205KB

MD5
8c18993b476d413c0371b339d20d3094

SHA1
14918c344d86290aa5add5fde94ad445c05946bb

SHA256
284f6f605d603ee4e811d32911489aba8a41ab2bb84588f996090c3fe0a35c55

SHA512
127d61594a71e441fe28c75060422fdfd8716e0a46c590e5e5f02a3d65540961fb1f80a2449b9107b5777ee85973efd4aa26f98ca0bf4a4469be673df6895466

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c992b7b6a7a1457_0

Filesize
123KB

MD5
79df9ed9da159105f5e1457b7d8c168a

SHA1
42defcf099c3411a046b06966bf20c7c166c7410

SHA256
427463079fb335073c89d2a6a36ccd34cc6a55682df3318cdf744fdd96edc6f3

SHA512
65fe02ceff41a65ffc2feb0e9c8aecec18f80ae1462793974e9e6689374d1d5e2045678bd69b42c31525505748afb6305f434cb0956a367320d21c713bb44f3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9cd937239cc78594_0

Filesize
281B

MD5
279d23af531a5068bcb8f66714e93aff

SHA1
aaa36e21e283996a4b848c28dda7887588aaa2df

SHA256
6bb66e1023ea96aea4c897d13e459a3452ce291849e4dc50bbfb07dafe130f22

SHA512
02877cfef94c7cddfa81a96cc0e9deb76d946d9fe232f591da53605b66438af13dfa016bcbaf0a360e843abb78179a134192472f0eea762568b9661fc78aa14a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a016b97036cd82a6_0

Filesize
2.2MB

MD5
c3130bf9003320e79e0285404d8f92ff

SHA1
7cfa4a6b0ed23d29abb5dfb3ef7c865e290a4e13

SHA256
87279d6b191e672fb79dc0c154933bddccf7be33a43147d1da921e64cf355b1d

SHA512
44939f9740c3c4de4e308f49c623dface783c0fdd1b44760947afd9caf05394c92fe8f30e5f4eb72c17a9b52093843e6f8668ac11653758f242c19b7c6fa7d8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a58ed20485ac27fa_0

Filesize
1.5MB

MD5
1df0aa111489a3167ed83de0c8ccbd32

SHA1
3c70f7d76a166f88a660ecf76749fc19daf4a0b3

SHA256
90682166668fadf9b86d4aad307d1505ff4a0094a6c83deb042c17d3cf4c2d32

SHA512
4e79740a728a9ee7a130f456ad6bf1207f95bd0faac7253502233fa46a4894eac8a566d35983ed95192c245a6393e350ed25efbfa980aba406910fd29cba68e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a8c4e71932e36c4e_0

Filesize
35KB

MD5
10a4975a3b6dce71bbd9e1715891a926

SHA1
db7a13224c98f6ea6d84b638ec907a7aad6955fd

SHA256
23fdde2fddbc1abe89422c6d55e639561226b628a514afdcc64a3ffb87b89b96

SHA512
e7aced8b3abd79ed7755eb2eeb31913f08ae1480bc95035874c8cdfade5f76383dd4bd6c43ad86f7e1709288ef026ed6454cd7ec62ce835a6d0f2e886d972a66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc5ef190307a5f7a_0

Filesize
136KB

MD5
15a97cf9f49e5e6e7d3a4984ba8c8ac8

SHA1
44e640ae7e5b150c7d61ca0aa1053058443f7e66

SHA256
0075c6f2bba1cf68fe9f5389e30f32ae4e80c1566cd1c497bc89f87b400a92fb

SHA512
fe8efe56933c496026d91aac7a982346219bc829a2ea9ed5e5189e56a33def4b1f82c74b0c733ef7b684afad6bca9a59f870daf108298212e8a02f9fcb59ea27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c5399041a29245d4_0

Filesize
10KB

MD5
e4b6d8f4c8956dc7dfd1567f512d4d0a

SHA1
3da4f978d8a26fb05f8d452ebdfdd6e871938ca3

SHA256
775ed4d52fc0b0ee163761cd6131836f8e8c3d14c39a13f66f2b052f6b40586c

SHA512
ee069e42f39a270119d32eb9000ec2f5252ef0473bff5cd788bb5f316f75847ef90bdfcca3d6f052912101a2d54b645ba221b5e55826027c25d08b6cbf014ab6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dbce0a93d504caf6_0

Filesize
21KB

MD5
659d87d9edfd90ac103c0d7e0d2eb0f1

SHA1
0ac1a7609db200121dd15b8b5311966c647aabee

SHA256
21c88f501610ac5add9899b324699126d6c3942068d74c2b755412f1f04d1c31

SHA512
220952605fe9460b27f14c78941aa12ec6080d9bb0063d7dcf1a6b886bfe4db3cdcbd1f3549f3712d12ba412ba95b02a8ce0e66b77fcaef641c49f5afc80ef88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df4e78e61a62afc6_0

Filesize
13KB

MD5
08234e9da389c0543dfe396d43bb26af

SHA1
5969949b105568ff3e2ea99b3d6a3a518a406869

SHA256
6b6cd4d8595d462b88dc44e2f233c113d441b5fb77c12fb12ff33aacbb1d8025

SHA512
857bd4fad242d0007d1ccf3a892623ada7a3a323ee3903b2a7656608afdc57d73b3c71869e12937dca7533c21cdbb63807d72e0612347caf94fb9f8de763b3b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9545717e6d151d2_0

Filesize
62KB

MD5
2a12a5f2c2c436d8b15fb05c6b73bbaf

SHA1
c9f2f56cfedcd2570b26615e7465852ace20921b

SHA256
7ccddc737b2fe352f6ce525b9d8554cd56e8020e4472f00d25db96074518a0be

SHA512
807cf05c7ba0e12158fd80d0b13efe6f84e7d28c319da42893e6d5ea5f6193e239474ce74007944ed1caf816e2022dbc25abada78c948bc04ba1b39893118e03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
896344ed1be713a4e32fd068ba3a3599

SHA1
44d458c1c824ae974e87715a15334970d65dc5ea

SHA256
1ff1294f567a80d1e7328f2c6d7f89352f6e570d3820a92fa34f49cb86056789

SHA512
b38d461bb6d0cdcb6218eb01c58c4a78cbaf0c3c7d737963d63fcd5ecf80bdda68b5b27ab4828a57a69f8677fdae5caf1aa5b3b32aebc50b670e6c889fb8d8c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
896344ed1be713a4e32fd068ba3a3599

SHA1
44d458c1c824ae974e87715a15334970d65dc5ea

SHA256
1ff1294f567a80d1e7328f2c6d7f89352f6e570d3820a92fa34f49cb86056789

SHA512
b38d461bb6d0cdcb6218eb01c58c4a78cbaf0c3c7d737963d63fcd5ecf80bdda68b5b27ab4828a57a69f8677fdae5caf1aa5b3b32aebc50b670e6c889fb8d8c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
0f1e4bde91a8b479ffa9ffe37f7e9765

SHA1
e6111327c0d2b139daccbda0f627fcb564ec5631

SHA256
4f53caa35f7251b752a3340f60adcc5dc459f16f1187e7622719600a13e74ddd

SHA512
0cf658ae1eabd5b14fec4b771b9a87c45acaeead99d36e5d4e7f42e0f802f2c8b1caabee2b762ea2e87901fd7a6b0e56c5b54b2f37979fe2d6b6a53e5d95ba1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
672B

MD5
780c7e476e33be80d865cb670a34c3dd

SHA1
b10f9249f1129f6fcede0d6f6df0e41e13933de7

SHA256
6a1fb140965ce21517e216d5fc3f1a466e3c9320accae772bad61d685949180f

SHA512
3151ef8dcab26127e27454301f9a55db5a78840e2a79e9e1d6493595a99a7c2d711747b3c5ba3aee4810037999e414c900b6e5f1605c0569b6d479e4c755ec76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1008B

MD5
66d92d71b7653f781fdfd4d825dfebd2

SHA1
b220bfdc50e23604285ddb9808bb2bc5ae4428d7

SHA256
1125b27f380e0773f0445478fc22b872b4d4ca1da6b2bc7be807445c56be0bd3

SHA512
b46979f9f07a5d696b4586ae31d9723dc8b9fe380dff7b0b2e40644707dd581ae03c6a46a2347c446992dcd5817db706c73c3d4a47c50b42788731cddc38ac82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
f5f88f941385193328c8b64339dee7fd

SHA1
7bd5a8146589a21d290cddd2991eab1558e59893

SHA256
f4abf9149172d1b7d767ab9e64a768b95f80f96a1dc314fc3ca41755de729fe4

SHA512
680ed3cf52f7563d09b46a8774443f82153f8b82368df856365b1226089b35562cbe244143168a0373c70489103835c66d9a0863b10d02af77cf681d8be79dfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
d8878c96b102070314608e362f0e5f76

SHA1
c96d8d18682b86d720695b1988ff3a458917b92c

SHA256
d1f9653887c509f6154c18ff9709ada477d49dd56949f83a16672af2c4264840

SHA512
7d0063ab78720aa8163e73387a89afbb3a7438d6211dc4207d9e2190e78bbb142b323920a9b0cb416a3fe5e53dd09eac5ac627116f23f8f5aa22cd1e4ca84c69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
79f26598522876d49cfba22f674632e7

SHA1
295b0bc3668cd47b51127722cd22bb23d0d6788d

SHA256
3485c8899ac2cb3973720f79777bf43fdcb8ed124ad59a33d7d95e3f5cff25c7

SHA512
eb7349fd12a8b9fde10eba2eef100e8ace3a01e07301ad870b7392306a1f9e875882766fe1cbcb542988b6c7c4f12c4715985a6bc43b3d6511d46f866d514eee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
1138f251accca459715ee5fd9469491a

SHA1
296307d4d03b20b077ca987d3c1cd442aaa2161f

SHA256
a939bae19a16797916da36f96d81889fbca1d57b329fc563b4b130082dbb7e9c

SHA512
cee7dcc1af133d26a2d611fc3717fb3fd276535d320edcd07a3c82c537dd06ee98dae7c1738fc3faf7d3d09e7f43fd3abf269c0efb8bc82144c8267e8fe30e8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
87c6e57e5278813ef2511808e1d2d89b

SHA1
5590234472187ba951516f7993bbb1cdbc44db6a

SHA256
931947a6f154d8f6c07827f6ff4905633eb22dd49f79dc65bd51e4f069c71a71

SHA512
1893346e00f0c8c2351923f2df26fb91e2872918d995e7d1e0d835d1809778ccf5a347cfa9f3a19b3de9470b6e0c681e7a4da458d57a6790941bc1e84e8878a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
5c76e6477e601286c96b12c289b86068

SHA1
3687812f3ef98052701b50f4fe5792ac44baca8d

SHA256
f5adef94bad6066c2abcab1d2d82d2475b132f13b7a52dadb2ced664b19bfdc7

SHA512
92e09edcb2e5fd6a8132004176cd0a461bf7fa834beb84c2ce5f999d3ec3c1f5460151921a192cf636a702a88441c0d5b198d6826209e5aec037abf6188c7a26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
48B

MD5
0f1e4bde91a8b479ffa9ffe37f7e9765

SHA1
e6111327c0d2b139daccbda0f627fcb564ec5631

SHA256
4f53caa35f7251b752a3340f60adcc5dc459f16f1187e7622719600a13e74ddd

SHA512
0cf658ae1eabd5b14fec4b771b9a87c45acaeead99d36e5d4e7f42e0f802f2c8b1caabee2b762ea2e87901fd7a6b0e56c5b54b2f37979fe2d6b6a53e5d95ba1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cookies

Filesize
20KB

MD5
7d0d95163fdc70e7adde0a43a1d870f9

SHA1
7d3371cb6c05c1514007ef53d68e44b8c462bb32

SHA256
657a50dcfb621789930c0d84a4cf9cc13c7739877c5ada8c88d91e840967aef9

SHA512
41b47bcb0bc2ff6ab3f408b8ba676a46c327b845676c9bf2c78d05b467e61022f8736e3147cb184fbf952004251716f837dee82df3d08e66756e71c9fb5a0746

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
279B

MD5
44fea6db43f2008755142a65b29dbab7

SHA1
cb0adb282cae8f4b14f4b18c1ab13497945f404d

SHA256
2ec3e1fd2954253ab28bc59c256225fac0e3de93dcb448ac2f2322ee9ca0e64e

SHA512
d868d85b02c12cbeb0e196b2ccf8db002648ffde6cc609c4f16acc8d296e947a2b23b5e0aca7d7e64d1c333c4f00609c58034256c35416fb99e7bea1ef25d9c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
20KB

MD5
31029ab38b1f4bc422407d11ceeb29cc

SHA1
ffbc0b66de03e7913f12c90a5dab6e24d442e898

SHA256
65bb47a5feb42c3b4530b5ac6ca99820d9269bec3d943f7f4e9d0b89fd961b6d

SHA512
f9d338e3856baba764c2e77ac1c3e0308ea0fc808a953d64f601fb5077a2e3d2e6f1bf4789fb2217aa77170ea24632fca7e2b08109694efc2e11c2c83b182d31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index

Filesize
256KB

MD5
b4169ae8dd81e247ee03fc583cb0ff23

SHA1
6033619add5b4cd4588efb42f891caaf341105a5

SHA256
50a4baa39106ccc63debcede6c1020e8c092032d1bb2b50091b0e37db4886c1a

SHA512
7ba58a16517f4430bc7151f7bd0b957d0d7df4ce40baa6f699c126bc7c4d4cc781d161f2556e6b0dc8c3fb6cd92c2ec961616a6d0ba2158e8961eaba7e08662b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
124KB

MD5
e6d622275ec0aeffdb31a5559ea08671

SHA1
7dbbad9f613e80b9db505b80fd1da7f22de5a658

SHA256
96710cb1b7bcc05d8e64b09bc0403e352ad80f616361976a253064a92685bd65

SHA512
e2e941253cba073686c9da0b1964e55bbd330fb2ff174f461db15b1217f788b9e51f7cde331a2910d56d7f98f3772c426a1d9df44d887e4a41d37c833cc625ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
1KB

MD5
4bf7da2cf87fe9b69eb5be7d148a8039

SHA1
fc5fb04b86a4f12bb0e632563cdfa86f8a1c9e6a

SHA256
37778e6f2130cdc3da4a0ac488109439377c4c0cab1f89fc622b678ae4cc992c

SHA512
4a58f409fce509982dc065174124795066f6c889eadba4546b991f2de433b9ed103f4353354808d1446fb3cc3474f8d14382e8372bcfce5f8da8f58f5ffe79fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Filesize
24KB

MD5
45b2efa3c9571cd09a0bc5bffb377fbd

SHA1
dbba39851e6f9470311c393507ae065053492a32

SHA256
4c03c3e9d2280e591a7161b95559460cff628c891151ee7348e8628abaa128a7

SHA512
3f51872f2224f85ece14fd5c8f23e4f0ffff2a6ce92505cfcc321c7f3282fc8216e4fe99c6b2199abb908dbebedef09286e040e8ad755fd3eac2ba95aaf630c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
334B

MD5
f591d3ca212ff90786a2f0fc67f84913

SHA1
119e9b7fbbbce551416926ede36e2cc20ff5bd9f

SHA256
d30332ba809720bbb6225c3c14f7d87d20ab7616ea4aa68f233bd6d210183325

SHA512
128bd954ec1a9e3c9ef73ae913493fc1bd77908107a2b1965e4b1747e37144e5cdcb5edf3be2a208fd4d0a2171a1449f60c61a8d85c4e0f41cf24ea6daa02481

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
3129661b55f3677573a83da3dd67f942

SHA1
6566b308ab127d450a4f04ee966ee07ead46a9b0

SHA256
8a95ac5339d965128b8b778ca74024985174888aba705577358e67de27daab20

SHA512
af57b8f122dfaf28d0823f7ab797399bf9704a6d68f120eae8380b4b19864bdb5f413695de816f3aa0bf68added47eba65a20b9935aefae138b8d55ad7a1519b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9b00d300a7152007c281788aa18f4697

SHA1
c7c3b8cdb36c5f0128f4235f213bac3376567bbb

SHA256
56aca049cfda1baf6f9590b1a2615b21ae873c1b55965f84b6c9b869b912ccca

SHA512
6db4ab8ea67376b46629ca28a7eb1c289aa1ace1ad6a615881d3165290b36d0069c7acc3212c5ab437c351b65cb6ab97da086d6f2a5b157a6926b5ee17573b15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
d0ad593d169d405ce27b78cbf3ab5543

SHA1
5add7077e82b40dbe3c991d1446fdceeaef4e3ee

SHA256
f541ca953e162dd1a801b0449a9a4de574ae652ca3bf3857cdedd8aac16deab6

SHA512
2bf44319c6b179309bd3981ec9b0636b8c5edba1edecc389053f95566d95af831ace0bdc7e908191952dd2e1e0a124cbf8dfa6336ae953db9cd9a6060e01ab79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
15KB

MD5
232ed561ae38f6df08d77eebff548302

SHA1
d3eb610078208da607cc89889670d1ec316fff5e

SHA256
33cf60de57eacda712dbd299d12166e36beaf40e74b84f0d956ed96cdd60b92b

SHA512
8b019d0cc7b75020f28b09e3337365760aad08cdaeff5dbdc24ef924f5cafd8552ef48b9445ce4e254d0166c0960dd36a5c208a7ed388f425dd7a07de8f53129

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
16KB

MD5
d8c32580f9989bd39fa2509e6719450f

SHA1
531208b58007fda45b5e46de6f065ee233f2ac79

SHA256
13e4b69e0cea608fc3a7e44b2cff7827b599ef2314349404fa54882b4e9c41a2

SHA512
51c03664e4c4709a871de2f7d40eb37a9060c377e7198e6ceda0aee66d0f63eaef6730046c99d100f5eddbae29782c0a4aa3f5a90f5a55a88136deeea288bc53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
18KB

MD5
8d6a2c392465d875b8fa6a8696bed2b2

SHA1
127f4615cc8b53282fd13df3a4c7b6db7e8ec159

SHA256
1c6d16775f2ff697a1380cfe2c632be551da9d5bfd2728ae7c058ac478b99fe4

SHA512
cbdfaf3649c3721ddc75f9ef05f72116c594ad1ac5c6f5091ab19cacfd9b28080797d3633a48f7fd1de9ce9878b6ec27cd92f2497954ff1aa5446933f3e04a87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
20KB

MD5
36d340df1ed0bb56ba9ddc80f5aa84df

SHA1
b083c97919217c27c2bb185a4cb2019b95e3b794

SHA256
3ed830cd8306174d02e566093d3da5c614a728b6679d3b91d7ec281620687fee

SHA512
f40e4aa2a26a8efe755554786f7883a1ca88d6669b61f8035eec28f553af65df248fa9fdc8785bec3cc4b002d5bd1d1989c2615e5a50cdde1aa0902731ddb340

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
7e53729fcb1fa1438a28a68ed5d97df4

SHA1
3347e677c231f4ba7fb269a522ff5c8863d2569a

SHA256
26e9f25afe612382eb6b20ee3165da11a47c18b7ab35b8211d1408df123f65c5

SHA512
20909e129b2748bf44f3ad18f44a3aa79fcf8269b0e42b2fa3b40cd8c104ce4ac31f348f93f0b1058f3202305a67493e8e6e19abb2f15af7e5fe5e26327b93c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fb3dfae5d90b954faf41cac1fe554a8e

SHA1
6fd07310e69b59b3047e83b3a799504252d0fe0a

SHA256
8d431cc7e52595e572ddf00e3307deb93bea73c66e8a27222fd8ebbf8d235e9b

SHA512
7e5f3e3038be89e38885984059aabaeb7e4e1159c732230e4f8b276e66fbf37418c7da3d869acc9dd41a4e19d2084d72ebf7398b75cf473cb99670da92c74fb2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3f6daa3ade1fd9dd1bc969bfebd5634f

SHA1
e249d1c646fe9ea27417b5260d76f051682e32de

SHA256
5c80be808a4ee6947c76eb8b78473ba175d91547bf2506928d8f1820eeca6134

SHA512
027e54a28775d0596f86b69706b77d4f62ccda92bdc4c6e05e4c15780cd849cdfcaac43aa02d9b705106f4543b8d118d892d4d74666adb5ab416b34e51283935

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9627ed0edbe4859b10d415281409b8d3

SHA1
ea4747500e5f43a0564286f1ae2931580603f2d1

SHA256
0718fdb0852ad1879c702229055bdd34b01c70a7d85ac159f2500fc56fefd505

SHA512
45e9573dc1aac891561f5f1eef04e608c65f9f76ab92eae54424245c832a0511fa1d0f984bfc37bda45a966bf355c3031a8858e61a3c11bcc3aab10e7eb4ae75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3486682c01e3df59c3756409e33ac2e0

SHA1
4b413b5061d3aea50d8f02232ebc06f3e51f94ee

SHA256
7670fa79eb4fabe073d1745e9dc5e967ce9fb9e843164de537f7adcf2a246ef6

SHA512
b88878236b8141435b654320925cf70c15b5fc6f014d3f01b465c94f9a5832225b33514f22b0708614beb5a3423213fe138abe0ed52442f1371a48a1810d0731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
dde02887cee82cefae1b7bee3e575715

SHA1
db4af56a65819ff6a6f21be529ec9ffcd4b53b2a

SHA256
27d66c6ecada29f0b18d8e3fd6c08f1d4c10912bb1ce3f1ace485fe744e1b0d6

SHA512
56fd1c43dfa138c26dbbbc7448577dfec321e2355c086a78a59e0946393f2ff8507c790f17269e7075f4f4863289a8c6de77c2eb5441f9a16593819e6b7943fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
f4910fa74e065a6fe18d32ef69389e14

SHA1
b4215a77108edc67abf3efafb0d44fdb93f737b6

SHA256
9a31f973302aa8a7bf021c8b0dc78d4e9137dd83ba53c195d955a77521c647f7

SHA512
e76e4bd379ff22d1b2565d444cf3521e95aa3a241e23d030c59359e3b8ddffe79129895f64e534f5b230b9f5a6b9b1cf6b3f8f42b35b5e981c59d950465b2971

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
04baaa74028be0e4503147a8e5e78c62

SHA1
49bcac267520bcb6e1f1927a59f6a68e65ce1df2

SHA256
9b42d32fe6db398c27a896466ea91a05a4bae4c01828345aece33b903c8eb1ee

SHA512
c6a4034142e4609abfc2781f8f0f7004a90bd2dedac76a697d4cadca010faa063aead7f4f427c1a3864ccf809e3941cfedc376134cd6607da8b2a558638e58c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
908f99fb906257bd91728899bf5a55ee

SHA1
0b04ad8b6160780e811e238f8df0982fab5f0373

SHA256
125b262860d30ce049535ebcc5418943bde12b9603cc9924bb587ae018028026

SHA512
7720f2d2ab352e8dd8d24678c07e7b7a0872bfcc0341515148f3fc2208261564952aa424b5e3c15f043f7d217389e543fc95165360814a564d11ccdd1e2e81d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
a83e229ccf47fd934a2e333b80b6e7e9

SHA1
c9e6c5e2c97d3355e453fe426f48dea5e5347301

SHA256
5a47ff523c8dce9cf20102af64160deb0a3caf5ea2d35961c80958604f1fdac3

SHA512
968609155df5b7267059548fdfe2778b1ad40a06021c228ba8dee292eabf8c4438c87d7ec5c544fad94df62edef6ae22d630699b12b71dba41536ad4c69b712b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
591e76b91b44889c1afc2e40f14bf7f6

SHA1
df7e13e0b0aa5cbfc481e4f028cf62df84d0d4d5

SHA256
894fae3bdfc9a08eba028b7190aa01a9e6357a66c6c65aa53eab629b3e76c9d4

SHA512
375aa49b2c6b0f079108532d06f765c27279cba82ac1d26b30ea25d69e3e44d4c076d690dfc8fce08f436253a96ba7bc335d825ac00bd64397635f3610b93818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
a78fb7addf06aeff14593628324a04a6

SHA1
b1697f36329c8def60d895cde08dddb5ccb3ed7f

SHA256
f56dee62425358c5b3ec8a6bbe7ee7f2ba789cf9dcb1544e35967f32d87637a2

SHA512
5f2fd2870f1e58ff53f72d53d555c1d622a0d06d0fb4939ace7c14ba9163f37360497e21e53c923b2bf02db8f69f60a0349642f3ea9f056b22696739c8fbef00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
e084b4461fb670ff8556a70b453c02d6

SHA1
2b4c1bb748cd27d86c08d6e1ddd671610e369522

SHA256
36f3138b0426421e5697c2eb2b87bc5c51bb1ac99d9308d1dd54c5127c9eefbd

SHA512
1ceda6d1c203ddfe44cce8efa23fd4d9081b6664bffdfd5ad3ea0bb49e538d95c02487aefd2bd15a0ed9b6bd6d5357815870b89dc6662cb395ace95c381e064c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
b096726453e4ecb16e0466270664a908

SHA1
d9f4451f074414b989751eba738d754e6e71cc13

SHA256
54e64366e1cb39281680054d608fd1bb9822e09bad075699df28bf7526164f93

SHA512
a4f39b8780d45e167f53e037641de52210aff864f61dedb42ec815c58aed4881e465dd7525f0ba1c2f97775ccb90dcf48754af8028aa65ce0bc460b6e173e12b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
3143ecfd73f3d61c2d2668c50d7ea8a3

SHA1
800e3b8303b330b536430f4653a3e3cb759ae9b0

SHA256
a746372af157dea700b4d557748b27833625058b5a071a113cc27c4a04901b95

SHA512
23f4396bec5a7c57dc7eae3629e5c35489956569280c36519f213ed201818cff74ae0baa43c07920a4ed254b40deaa71f9246b85aa9afd437120a87c3393cd22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
4d741478ef2a0231d5244112bdd39784

SHA1
20d1c22555dec3f78693eabccce7936da12c0697

SHA256
1655693f02d0efab561402a617a28685971426551862641e3efc3ac3ae561fa3

SHA512
c27a7fad4f057ee8e0d0e30944004c0538d00f2b77b06e33e5c8314b016a775ba72e056ba89459dd9c247c19b1b43b84605d12bb22e068d95451a51f18ae2636

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
a061a35e270012833bd168a132af0ffb

SHA1
2136a20a659f9d92873695f24c7bd2f524d91b9a

SHA256
8a0cea15e1029cf9813deabcaf00d6be30b525f2423d02d3c34dbaf922271a58

SHA512
b9cefa17a0a1dc4026d49bed7c7eaacafd990eb6cda4075ea2ddb37d7b65eb8e2b8367cf2d986920c86678e1bb94527ff7b50b5bb7795da9d4d3ef1f7912b411

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
b27b70b266bac05dbe36f48cc2dd288a

SHA1
76bff43ab97534b39e963bdb5f0565aed6059321

SHA256
63b68979462ae3f6a204003c4dfab1bb877ef8babdd3ba40250d9a8de64286f3

SHA512
35ed3664e9b066da1986b66624c743bc0b23a7ea07b2e79a75e41882ab8f99a9962e93ce39af52038c13e09c0162f6c2ef19a1c81fd7584da7e440ce30d025c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
5955c9a52a6990efd0477cd5146e162d

SHA1
b3cc52197a78bcf442a5b3d2d830b51a63004052

SHA256
70979556919e97dd93a88b98ded493028e15480a64c862f10415031eb9bb0075

SHA512
a78420f5efa22b1d2eb86d4b32d5818b210ca8b0d26bc9f698ffdaac8307153815f71c7071ce5e6e181d30d5b90677368fb3ed44e5f11c4ef14bd8ce279a8d9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
c406eb5ee71358f3569d5ab7f34504e6

SHA1
48784adb1fe3a941f2f3143b495c465d6d562387

SHA256
ae3a34169886a49903643b8ef815d0f24920d53244e3671273562a125f891dc0

SHA512
4d3fe101b812496f2499bbcd280ce898697bec277ea13b8ae3302855a4b53c81530e8cc865a06c04d33c793b8d902fa20b80aaa7d64ea3189af38fd97efcd04a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
4a4f9eee0adf3ed3ff971e5ad86d6bd7

SHA1
33dff87014b06f85afe2d439beddb19a5bbaa127

SHA256
670b88dadbf099a6c3295cad24ade90f820956a2f809daebc60e50f31ff0480c

SHA512
b2f87c0886f4e2f0101798d86aadac62fecd9f7d66eaadc1c235810ccd69f291e44ff6253fc5d97848badc47783c0d9ea92cf83c07bbc48460f0dd2466e489c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
947629b90b02693a66188d120f8f104f

SHA1
a09f9a85fca3741b501731d7f6fc75a3737f6334

SHA256
a9dd0e0ee100ced78080d06fd0c142cf0190efb9b70eca08703d9ec0f66ab3d6

SHA512
ff1fc38426aeb97b849743deadc78a249f3f030e29e05ba17b95ad4dbb07e69e2cd3e96af2895cf51f3185b2d04b8d7db8575b7811b001f18850fd9b38b27819

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
d8803908f026a8eb14d9efca598ae08d

SHA1
46f15ff2414202b2d0300895d3cd558f708912d9

SHA256
bf9650bbcd7482d1892f8a201567ff960e9ee723409021f29efb7230cb494063

SHA512
7444c3b4107186ef299ec73af9bc35ff4301c05b229d49c05d5dc43475a6f300b59353159cd63cb604f7cbf8cdca03edf8a00649304ae0b26bbfecc9dc6afb16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
f7815bb3037a824348092f902b658a0b

SHA1
9e39eaf331269bdedec04aed6e3d473d2fea9184

SHA256
0437644a6ada8b9d3f70f4f3c49bf813b1c9bfa82eebf9b9172eed64ee1320cb

SHA512
326c6eb26d1eda2031b4e9fd1e4474ad21ba8a008dd3f28242512a19f733216999d78cb3c5713593613e75470161bbd859d9f8b3c4f8ca721d228c1518141a12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
69576ce74c5b658bbc418e33282b4e56

SHA1
ba666f5280c70133304b2adb31691551f34b4b5e

SHA256
b14df11adac15800c7ed0c16639f40f1cbb3e4496c24785c4f224b8dbf90cd44

SHA512
b0b4738ec3d422032d33414a3213a7c3863431d0c5f8ab2a212bd290331f8a9e48ea601d61251491525607d96bb46b2bd52c30a7bb92e71ea2f1cca3588f32ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
cd5a25e3e5f64870ddb7e619da60d307

SHA1
17fdec772adc1d08e906d949be7569ab5480b6c1

SHA256
3867e46752e0f5d01e2962f0b7ac996d2199297975a87ac55de660fc3247239c

SHA512
6cfc17e3f1f9570435a3c3250932d124b666d7e05beecc22d3f850ebbc3cfaf8444863586d32325f938b3e8f7be4775f152fc337656d62134cae749454b94891

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
fb23d474bdce8c42f8b95004ae897af7

SHA1
43136a0a2ff78d3f6f3affc81d1cb1a76197c37b

SHA256
c43a1cf2408dc1a3979ff4785abdc0336f5fb09ed7ce320bb54958c00ebbc7fd

SHA512
cdb4c570832c9363f284e71398b8d5704c613a04510930409d9f71ae94588c5c9843050712ec8c30da83fc580cec593ea608f3fc05013c1efa3bc705851ab339

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
c78cb81bfc1cfc1aed74cbae411fb601

SHA1
daa3ffa33fbc3c1f36c4270cf699f03b8eab71b2

SHA256
eaf692a06386d18c11b13119c4310401f94b3c4feee6c98081d83abbaf809918

SHA512
1555e72b65357aac4e56644823ccff196b0cae7698e156c62d7b220d36c0a77e4b9920d5fb75b293bee5ae062dbe1025ac3d029381d7cd9f69bb3abe72f675fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
c23d0e56be353c3cbadc0b9e8fdb2132

SHA1
69ba52b77d5fd99f5b14b0d28ec77c77db566c38

SHA256
418b2754f85c728273edce45968db3356d60431e2811db7c1e2ff5eaefdfa02d

SHA512
0d39151e66b4788bd0b830bb9bad947eb3396bc8edc529ccac1d1fa0953803e55f3f7b74660b5f66c394a77abaafd09194e5cff470583a29478eb3fcd313d23e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
8962db899a2587807ea7f5237077d793

SHA1
181b1688c4010321abb6d083d97002b4776369e9

SHA256
874a881eeed767d6c0517b07060e61b372f544565846f5950be820b9bd6f0cb2

SHA512
f55b96fc39e6f314029257b7951a9bbbaccda08f945667105b841daa0f7665a2861b89a1a0044334f534904913bb076d93ea2d6ad405b95d74cad879aa2c3e92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
53bb431acdbbf885f7410eb763147402

SHA1
24247c444c46660f399d06a8d19e7a8405f23edf

SHA256
5a763b0924a1c460912357863efe87a92986bb14396cceda22ddd1dfe272d328

SHA512
adf5a86b43d27900595d0ab7f3e2c3f88ad63cdc8df4719c821a05f1a6d3cc15b45693dea1aae419299463f958b373145a0961f2850a77daabbeb6479c9e80e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
d1817cd839f62b183a7d2cc4672403fa

SHA1
6c2edc2dc347beba416e648895f5eaeddf72c7dd

SHA256
cbe8f8b9250588a251a02a83ab20404ea17c5842ca717e94da45559ea588a1ba

SHA512
767ba4ea34af8dc75ca11be47a856354b4ef9a87114f6f61483ae18043e48b5178f3aee3c7aba49b39c29c197360d9d402044d223b745d31b32cca82d4c3d484

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
6fc83e9caada227b209534a38078a62f

SHA1
3727bed1766b0b5a755693ba59101354dcb373c4

SHA256
eb60defc53b36531f3446845b8676b8f75fbd964f42234eca352bae543178615

SHA512
c3bfcd1eb26cd1da0dd4b380213d906997c188b4b943826b6f11c250b844fbb21e8b12d6c26989be32a3c8dca8e84cc3e231dbb727ca591d42166a9c9e6044a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a9edf66bb7af1615035dc092cd0527d5

SHA1
2f1016fb79d94ad4ab757ccbcb43e94bf2e56a62

SHA256
e32577de14a5d89b099534cb51d21441a11f8272dd68cb4e6b6841d662f2479f

SHA512
b53e9b4c61e21ab02e948f7fb9d96c358c9617fff8ad85bd416d4ebd214ce1df0c69b4371b6837575b32f7b495067126ab41dca595c040c5225e8d017991da46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a9edf66bb7af1615035dc092cd0527d5

SHA1
2f1016fb79d94ad4ab757ccbcb43e94bf2e56a62

SHA256
e32577de14a5d89b099534cb51d21441a11f8272dd68cb4e6b6841d662f2479f

SHA512
b53e9b4c61e21ab02e948f7fb9d96c358c9617fff8ad85bd416d4ebd214ce1df0c69b4371b6837575b32f7b495067126ab41dca595c040c5225e8d017991da46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
02ee7addc9e8a2d07af55556ebf0ff5c

SHA1
020161bb64ecb7c6e6886ccc055908984dc651d8

SHA256
552d3ed359b7a52278ce621674d16428d8a7969f6cd5663df18e240cce66aadc

SHA512
567989543c3848a0c3276d96b96ca761f750e4b71fb74f36d809f590ffe16a72fd5ece251737a8b1ffe65f0051e211bd7ad19d2b8b0b7ca1b7ffc86dd2a52883

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
dcc01ffb23804ccdc8621dc8b2a42c07

SHA1
1e7682baf53248c679f526edb30b142760b205b1

SHA256
693097d434a3f2afe5019d8e0cb49504b4316b205f2776c6c9b81965fe92f7d8

SHA512
14e009a86b12f6205b866fbff8b9242989073d250d9500b86ae146627b9adc8fc43c533b5af5676bca9bcc1b5c342e9e17eec0cd20db8a537b9a677779afe88d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
ca1af62e79fdbc8f5508ef0734f8d6ab

SHA1
8823a7f272dfeb5603ed65b6d7c67515b47a5475

SHA256
1a6e2b6873bee9233171e3588993b03cef62da350aea38ac4c3b00004535e43d

SHA512
f684d48f155ee2340b985d197dd732b22c863acf6d60bb0f76e02154bb3bf3f146caa31f139eb37a6fa9db86a4fb4d5af72f2273c9de78fef733a2f21dae5c31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
b8c33043c3783127089c43b957b9eb21

SHA1
6afb878de91a29154ebb64b2c21806b8b07e431a

SHA256
66c1aab231f4082ea52459dbbc2123a6741ed8e474a9bbd7a8e60a8e8d9aaac4

SHA512
212c7fb3ee6dc70fdf648679a1f2a7d4a1166c49524bfe3be72add6f6f3f4a6121b9f542726510f6a5519592af966e53d8bd617f1767c6a8a049a56b99bdbd36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
54c118901568ff5336cfede668de9ec6

SHA1
08b1c62a73d241c0cf369cd179ab0be5238e5a49

SHA256
795aed0e7ab0fd08465c8068423d186a6db39eaf2adcadc1465118e5b6317ae2

SHA512
4c6077ae2884eee6e31679b5bc148ee1af4f4cf4fa0c825001d799062a104c98141546139327ae9c74edb3c8e2bb191fcd5347fb994762afd765a2e5e984a44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
980cf1562bba81c046f749c967bec891

SHA1
bd9dd32542dae5420b0d0af98118e4c00e00f561

SHA256
74a98def63ffc708c4f016c8ccf6f5e7b8065693780c086a6c2d80abb80181fb

SHA512
874c1de8e19c18106a46a59d441d531eedd59a953fe1ab011e375474fa421d74fbb1d952709a744383fffd13cd7b44254651b738c61bb9abefe5dad88c22aabb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
075791caebf43aebffe992554b87ac8b

SHA1
c42082f471da042d3a601aa77ca81ffe213cc6b0

SHA256
48fb70891fc8d8d0b1b87b7473f743d71f559ad592ae431972271164ac4f281b

SHA512
9fd6963208c98e622cb5999ba52905864ebe62b19921d2ad23d373c612b01ee59e22152ed9d8c5b5be59ad9c4983be96c43861c876bd9e5139730949cc1ab7ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
3ac925bd891862eb44c21756712b41d9

SHA1
6109e9b2eaa81513830a55e3d472e3959733703d

SHA256
096f35a996099107f0816338b34644acec1e41476253e06d947bd8a5aea75b1c

SHA512
b37eeee849366bf0df271e31ae8cbffa0354091968eeabbf1e77547541dbc9d121c954341ca013b5c52eac513694a8fab5de275c0f2afc6060f9daea941c3fdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
14b49e15aac025e2a780686ad26a1ec8

SHA1
8cde2784aff246974774034f22fee2c5e5d9d96f

SHA256
9dd84ba6a86ce1442e2d12d8b01b533dda004fecff5ba6ee7dc2e438590944cb

SHA512
2b58998b0b722d02d506ebee00b09bb471c3c7a54162d95537556e2b81fcbe44eb837647984f8c7ea33f56ff410b7150891f3da5ad90f4155f40483b34ba22fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
56aa7afe24507762ea3a293d81c77930

SHA1
71cc0981f377637d2ff7c31482fa02a36d28cae0

SHA256
2859a283d55b3fd2992e2765ac2defe4a7e6b0b18e5380762bb24d7ec20299a1

SHA512
148e99ccd346d8860e8cafc1ee35140025f565674de343e2d8a0ebdb554fae40853082fe811a47f4ed3e5e63e9a2b6d09c904777c466b165cb2e519ba5cd5148

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
fe5a22d7279df2624bf2ff87ce3ef410

SHA1
d4c15f32295352e4d1f9da6b610474157a73c9ac

SHA256
4872ca983f23f0475ac28171a989bd96d0e326f0f941db583f4b5a2ca82d5231

SHA512
a0d98db4b02ccdb162d3b16b40c1fb0620a495c55a1788fbb37f6a46b979d88f5e1d62ea44dbdf137f36e883299bdeecd839bdcc2a8b91225c28d5b263eafe2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
209d7b650f6757646a48804867c6601e

SHA1
69c253845be43f2d6ac0ec72d850cc5b2d2c19aa

SHA256
058a966a6881f24fe4c79d7a27c79a36c07ded7325258090804bf6eace90ea4f

SHA512
f3cdae752ba68bc8333ef05f36cdfdb1e1aa9df77a1308fe3fe410981caea22acf511e1716dd9bb6ec0bfb286e70387f43bb7c6fcaeebbd2756e7a0209e0d25c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
2dda8bca76cdf055748d71da1af13c50

SHA1
f2e075ab7d6cb4fb495cbe265cdfc18aff7fa357

SHA256
7c4da7509a893c0f9a09e1a2b3a3dd006183b41c361b2a831b3f0b72471987c2

SHA512
1a4127c9a8410c32fe3be4833336237fc85e3d86e1621cc03a0631dd8d3833894498b5a8bc427f611a60d67a5a683818105d489a4249916624f51a3d43386df4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
16c7c18d574304e0f210faf223c92a9e

SHA1
c317b7ace4bfda2e9f87bbf833c24af7e836f1e9

SHA256
8c9e285b34aa671ef9fbf6fb16a5ed6e7a5c1faf8acbb7fe75fc978a19410091

SHA512
1df9a8fb66fae582b016c77b99d0d99939af44e040203b132935c9dd477cf4db2a7a1f710ee4985df4f7450aa3b50c911da4a2751476a5ae7176f563f30c7642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
4094b6d17deb7935d4eaafd41819a928

SHA1
35c2ce96e7d48323bdb666d8914dc5840b4cdd82

SHA256
2f151b30fd868e4f438a44d1c383a387b9453c88d6a7e0898ccca1f996841cc3

SHA512
61266f29f211550a63035f89d956628833f7d8ca1b3effbb6ae059c5b9ac6f428cfac39b12ee1bbfd351fed3d14540be20705ab29d31352c0e9e97e368562006

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
3e2182c3306c92c61b17fc4348adaf1b

SHA1
c3882ebeee51151cccc46ffbda9107c6a9c0dd1e

SHA256
57afd6fa07bacf760a2cb883993e41f722c3d9fbf3235370f2a9083d26e8e530

SHA512
5f3822aaf8494c54bcc49dd7500e3087018265d2476bab577d7dc00925d8f802356e5f62ef27147ba5d623fbf5a54069334025650b78352d0eb4f04bb4dbc356

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
b381a1ea0bf964039eca9df9a77ece32

SHA1
3c872363715e3653a2365eca95acfe82115c6554

SHA256
2a408be4b014e6cedd51e6cd87b3de994ebc8cf7a6d6e0f089d077f903db90c0

SHA512
3e0797dd16daef065cfb86ee573008fe47ea8f2c74ab66190874102913db1c89f2fdf9a607a25f88e11c821aa7c03883d3d53c732078b1ddce06fda79deb4ddd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
3d1762243098d329b8acb9c9148c4cdb

SHA1
4634f1a34254b1f94c01fe07572a209668ff476b

SHA256
3b5e8601804337e6ef8d9d5b47c0a009df61e10b659a202aeb5392c3a8bb1fba

SHA512
da681985c77eb0dab749a60a0eb2f6f59972799fc226862df2c0012c122d9fb16bc9f9375cdf25af81be4d15361407d74b1add5d434fb423ff86686b39f307fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
9317fe67b49f90cfe7c70f63014d8152

SHA1
961b85f4a66dcc26b9755c144ac350e8f38f3cdd

SHA256
d209ee722751ea1f1efdb11f953330c228dcc922bf89eff0a54e4189ebc4b544

SHA512
cde6589a9a8d7e837d953ac46260447ff63af555ba9be1b8d911d60107913ee6f7f9e807be36f79599973c095384530724e7c7700924f99f3ff75ce52e94e479

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
90B

MD5
8d3897c8bece79b7cedad3f7c5e075f1

SHA1
e5afa9551d471a77075643c8424d27d78e008d79

SHA256
ba0809bcf9a1be8e5999d01a0292a3f38255a980a4423402296c2d4c349deaab

SHA512
c4071d39684b79e0d4f3350cda8ba7f179b56534d25583bd85ee2a833c72e4bdf7a9ed6b6ca23249f5dba7b89fcb8152c548fb23460dcfa7dda524b210b780a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\240ac87b-c7ac-4142-ab2c-4281ffe84aea\index-dir\the-real-index

Filesize
72B

MD5
9c801305b5c1535ed8cdabdfe61e7ed2

SHA1
4a0a33857d0e7aaa66982f44ce7432484733d788

SHA256
944cff3ecf56cd0ea0e2a8473a29d1469801cb194de0381a667667e9103381d3

SHA512
622245014ffba65bc499f7faf3ce3da3cdb06b4b6c0b39249ea4e45d2740eb8ece4443912343d0c7c014dba4ab4b726603da6dc25a7cc7511c182543af9e8aaa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\240ac87b-c7ac-4142-ab2c-4281ffe84aea\index-dir\the-real-index~RFe606064.TMP

Filesize
48B

MD5
192fa585bf08c972ef1153ec23853f90

SHA1
beaf1fb88359880b0d2bfb9ae208ad3f734585e1

SHA256
0a1d62d1a281d695411f33c88a281af108a68802576f69b87f67e94a3c2cbf71

SHA512
a22518c325e9dcaec7aa3cb65bd00b7a6264eb9010b4fef110793314ad7cee42bfe50a7b7f78db11bd539984bb411b22158941436a388aeacb7143148358792d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\2dad5866-48b3-4b83-8b22-b2bca0e56284\index-dir\the-real-index

Filesize
600B

MD5
f32f879b50864c727dc19c5c6c422937

SHA1
cd5913dd9b112c1af09e3e3b56ecbe58e8054522

SHA256
146ec45d2b9016168dae094415ecb6badf2bb327bf772677f6d7a4735d3b32b4

SHA512
20a8a06747a8929b5fcd1e70b42022018b9c1321f7c02af7e8b0dd3f6c9b6892439d3c8b5e39d333589fda7797857a6acf55999eae85462f45094f18b06877d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\2dad5866-48b3-4b83-8b22-b2bca0e56284\index-dir\the-real-index

Filesize
600B

MD5
7e275eb9396b3b6256876f9796cd950a

SHA1
ac6e42ff0bef1887cfdb0aaf335ceabdb300e85b

SHA256
bd4665e8cb49a9657635e38749d64de4a08dec6e1ef54f54ecec3d74ffe88fbc

SHA512
964ccc71ad45aa7ef813e7a4ac6b1860f6a7bbb31e21b6ce63588745d5dcf788647e91aee98b4b01ac087d83f8b5c1266ad64be06e9109965d4baece5136663f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\2dad5866-48b3-4b83-8b22-b2bca0e56284\index-dir\the-real-index

Filesize
600B

MD5
af77e075db4ad0d0c06e1ef4501a9757

SHA1
21e758f964d6c7b90accfe7a1a243675b20a135d

SHA256
abca49bac44384e2fe23599ccb8ab989ba77ee76c8df7b53fd97c2ca94ea7909

SHA512
a39e9e43b1c21415bf0a004653de6821721329d02a895c044ae3aad4bdc33d7b30f8afda467429bc6226abf16729a8685c25467d6cc476c2e6d742a547591d7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\2dad5866-48b3-4b83-8b22-b2bca0e56284\index-dir\the-real-index

Filesize
600B

MD5
3d2a29d27a5087c2c87b7ebbef979729

SHA1
4fc0971fc7b8d8ad28d1a2f03a81550fee47c741

SHA256
4aea3a5ac835f54ca30241e7ae4b8f24693ee318d1fa1bcae36c59e5a946688c

SHA512
ba4da36e3cf447977de0f2fd3f1c0ebeec512887f75ca9655934d5b47e19bd68a8aa19a78882ab12dbde4cebcbe054998e58ab055a7cdaf109920f3e5ea9705f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\2dad5866-48b3-4b83-8b22-b2bca0e56284\index-dir\the-real-index~RFe6185ba.TMP

Filesize
48B

MD5
1dcbd60f3fcf03e78f257cbd1bfbc534

SHA1
46074abed682b97b0a8b3990888393646d8e42c4

SHA256
66400e7a68124d80ed3274bc6d5036edb30d032756878a545ea7522a5fdba82a

SHA512
a3b2c916688b865b7d3cfafe9c7ecc3ca99b0955a0ac99ae9f5ce190c2eca30321b69e4ec7b15f1a50928cb93cef1dcb40d1c6dc5ff7f05d2861479376278c2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\3c298dfc-7548-418a-9169-72d91a5a8ffd\index-dir\the-real-index

Filesize
144B

MD5
9d19ac8c949a7a40a776050ad1728a05

SHA1
19d330863e487ed7ba48853a2898b4af268dd9c4

SHA256
8403698369f2d650d6736c73fc76c5e10c0d8cd6a3f0376b9af46b0d4b8e950e

SHA512
fc14fafdf2ea45621139e52adc41312cd777f7d772584dc91a2f655ae0ccfd5ffcd9addb55d24a1c902d9aea135e67d4c5cf4b01d0b6c843be1e9481e591d2a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\3c298dfc-7548-418a-9169-72d91a5a8ffd\index-dir\the-real-index~RFe606239.TMP

Filesize
48B

MD5
61fee7864a962ebad12f24f8c3ba83a5

SHA1
54bc92384f35172564a938ba453afdd04afaa3bf

SHA256
a7d3cb9e635e80a885fa362789ef9909e1a00c533b93e52ecc1a25f5071ce24b

SHA512
26fb85c93801a6acb9c178a9618d8ade0414778ff3e79a279e7079880ecdbcf3946e297ce2f9e95ca21e1f954539eddbf80eb3f63f1c739b539837390e1a8400

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\8ffaf657-a33d-412b-9d05-01624820c121\index-dir\the-real-index

Filesize
72B

MD5
8c29b29946eda6794ce912553685f233

SHA1
35ea81cbe564fd9cd08f218d591b8df93499bbae

SHA256
d928dd7e4017f9d2f96ba2eae230943e62b5dcabaa89bd7efbd85c4168271dfa

SHA512
912ede3726053c8318df01e6e392aa893ce8515aa519ace890b0470a3c69b25f8a12831b4dd05ee73a72fee65d07646fdfd99525738e9b0b01f8b134e3922b94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\8ffaf657-a33d-412b-9d05-01624820c121\index-dir\the-real-index~RFe606b31.TMP

Filesize
48B

MD5
17acbaa808567dda82af21406b3e4aca

SHA1
fd33b4da1a018f7a62e0a50bf70f9957629f0fa7

SHA256
63999645ef5cb2a68b612816408f77305bed582ddfc6b1feb027c3662dd6ccfb

SHA512
dd74cc4c52bdb385751fc4031bc31800558c0e25d5f89bcf5fc9a409f8b14d24e8c3a481e35181c844d8fa9bffa6eb8482f9c01c2f3573452452d27e8fcc1a46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\fbf4ae4e-18a3-4c9b-9bf0-badb06ec1d4b\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\fbf4ae4e-18a3-4c9b-9bf0-badb06ec1d4b\index-dir\temp-index

Filesize
1KB

MD5
a13e96d969a24659ddd8bb35bf26020d

SHA1
b6f75cd457b8187412d1d57f8fc9fc2e05a4f7b6

SHA256
41c2ce28da075b392e29f8a23f4190edb11008dee130d4100a75f9434f417930

SHA512
2fd799dfc876c8b9a22df863f5d40f833c68383b4ca35212879e1d64a0225f0d176de81bd64e64dffa682c6766070dae492c12515b1ff89a71b58f06cd63c2fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\fbf4ae4e-18a3-4c9b-9bf0-badb06ec1d4b\index-dir\the-real-index~RFe5dd5e1.TMP

Filesize
48B

MD5
3742adfc9ff585e9c3f2aed9af607400

SHA1
3bddd31fafb60683189648da276c12983b38648b

SHA256
90debface563dc9ed021f1971dc7fd56668f4ec11647a1254ee080e23c48aff0

SHA512
554cfe20f470543510a92aa2a99badda919c33e897555604826ffdb827629d654a7b54e42ad624aff44d149b6fbe80a2f95f59d3c576320471ba9c7b01242b92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
248B

MD5
0c6cbad1c3cfbaceadd63248b9d00eb6

SHA1
93e86e8a99afa51389df1e43684a4993aba89557

SHA256
d3a5a7a2da4043ba4caedcf4f166f9bf595f8d343c04b0182bfec1138137febf

SHA512
349128e36e4008188802a01022bf4975b92b0112c350777c1de3d144f8c790c646bef2b4f0d53b5d68bd2e0edbfe958a127682c569689d25bc93a766c89846cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
312B

MD5
da39c43a242e58005feb0d11e6ed638f

SHA1
93ea17c97606fd94f8922c91d23907b45bc65c27

SHA256
7399752bdeb7653812d553346478996fb96d3db9a9316ece7ca95ebb188afe0d

SHA512
46281becfbde504f65a7100234ccf804f985fa41b9afad0e57837f2d566e2d9d2eb70da951fe5ae8859ec27b96ef8d488669b4d6d8fa60d99f2a1b20f85431bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
372B

MD5
9e1ad20a6a700edfde9999de8d9b3f22

SHA1
a7625f2d8bf1ef0d9900c6438db6b85fa975a028

SHA256
7209f8efb54d68dac558e5a2bbf2210f2a48475123e01ae5f1300c0f344db2ef

SHA512
69d3be3446d09ea774da1506253d23a4b7e64c0fc73075aee4b79ed16da187be429582ffc4e54ce1710d20e59e8c4943533c6ae8970edca1a4c07a03e04c06ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
370B

MD5
70efd84871af92dc0993c3b5f551f3d8

SHA1
20b09160aaaa477a687c2d590a362787356dba7b

SHA256
778da359ceaf8aa75287108db1fcffe86e173c02267b7de6b536347b952dd384

SHA512
839fca5b8514868598e83894355e386e9ee10396f12b1835eb975cd985d4b37b6721daa1331e4f6d6710070bbbd26400c22bd3f35940297b44a774a74ea0f596

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
370B

MD5
d4695e21fb977ee7035751732d04f830

SHA1
8026857e5d0091a7c15e479822621156b5f01f88

SHA256
9e2e2c40f4da863fac688e6978985eaec2153efebea31c4957e51f46d300c138

SHA512
22088f23a81ef846dda56ad0a092587c427d306db1a75b638617c9e72260bfab432dc793581b708f8ee28d412cc6da32c40c69369f68c0d833d0b8c74d527cb4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
115B

MD5
e122ba50254dfeb3cb78cfa1223eefe8

SHA1
1716475b84992e98cc9996e4ca9ac51c9c199d8e

SHA256
ff7c810e4a5830131e528eea8ce55fdb1d862c1710b8a4184ce4739aef0ba226

SHA512
dacf7e7f7ca3a0f4ea50e2ee8d93c9d8b6395ee0577cb092238112c5589526a44880ffdf775be93c1e2deb7f6307f28f2367a78bd66f0bce5acb05a4eb946639

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
370B

MD5
72a7e5f8e59793bca4fd64cd2aaacd8a

SHA1
c124d7b4db840220bb0944a7dfa756309fd55f30

SHA256
b6844432dddc9bad414840504a3a789dc6ba40c8a3e94c9abdabc022f172ccd2

SHA512
18405562ce9a26f5ab92a373b5514b09365465acc80936f0a2d9db51d9a8017ab7a356543c1dc2a91ac8306a1f6b63b61a238393ffe7ca714bc7d62b40d0f9c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

Filesize
370B

MD5
a0dc23f424b3d6fa0436607642448285

SHA1
7df79c7e466a13686a8a07badda93d94f35abe82

SHA256
6f55a56bbdb59b266e5df39bb0c6b30532dcdeaed38d48d1fbd7e0935ddf514c

SHA512
ccc0aa44be93febaeadf6ef04b30c856721836dbb31c41dbbba4b4c0c7c9bc294230c434ffea1571c73babbd822c86fddfd57bdc4a306eade4d43ee344b34a08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt.tmp

Filesize
176B

MD5
c2a1d35f14fabf5e25f2dfe88f3b56f3

SHA1
66fe1a3c221693ba994a2de1bc2ef853fa8f1deb

SHA256
4fccfee1a791095a4f584d5b6f976bdaf5f0d277e6579bc8c2e08bf26098c92a

SHA512
a028dd8d81048347599385754ab9aa75fd79bc54879c677f683b933f4daf93106e97c497dc78f41cbf0c773a41ea90e24b4eb7f20c6270c7653e67a1382ab9ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt~RFe5dd600.TMP

Filesize
119B

MD5
ead7d22de26c69454840bd8dc8cd1b76

SHA1
a94e9d9371a0c12176a1b1515899ae46f5cf5b38

SHA256
303e18d502928ff53fa7d36bc84c0a3b3d6b4100807090d8a37ee77e89828427

SHA512
0d8a8a552aefe638116ca0de5e5c7e62fca135fbbe99db445d66bceca1bb9cc7eade54748dfffc61ad8336fa0f0a312e75358a054ee0044f79461aea4f739887

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Filesize
26KB

MD5
a6c0d6caeff99bdbe56beaa7ac020c20

SHA1
6268f40be07f2d14cee3bd70602c9dbd61e1e47d

SHA256
4567c92c9ee67af72e40e6eba909ade13e92a48dcfe8b0e0c1e5536419f12143

SHA512
b41e4c43e7c97ef0dfbac5c4f540ebc587a22cce97c182e74788328cab7487f5186f290f19d3f56a598b840e29e2184efead4e2c3fad4b35a249d40308759dc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Filesize
59KB

MD5
9a3a14c420090f045175dd4046a741ca

SHA1
ce6ba1dcb6f41f9b79baebf52f50d5126454cf54

SHA256
6561a96184e50c7b0ac4663ffd836883abd1bd887ec96fb634ac0c9674a97bfd

SHA512
578fd71e37db3e6d740a29a9a546898cba2190d4a4d2cd449fe8ce79eabce78b9fd0b80f6d2566cdd32c2264e84f3fd040fd08b3fe6a8f7fc1fbda9b69e224fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
864f0680f752d19d177bfdaa58e847f1

SHA1
fc123446c2fcd284adfa2e08834b423c0c2a2743

SHA256
3114755f10aad718b7e2667c15715359188f3eb0eba19bdef908e511119af0b8

SHA512
b6faffc42e39ea41934fe500080bb00b210ed0601707b5550f458e2d725916c6f347fe734b2ea000151fbe8aca5ec1a71d62d67670b9c8c851ec764ae5b8e65b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5db846.TMP

Filesize
48B

MD5
ba00cf44b32895b1e51497dfe25cbb37

SHA1
709db3455928b5a70566e1aa3003f326ad62d8c9

SHA256
34fdd1afbf1f158678da7a7795077ad40a69662182d2d6ee5e4f4c911dfd96a8

SHA512
db977d3064cda8ec688790389975b310fd5ed3faf276532d50c50650a33564affb7a6cf9b75fccd7bd661dc8f763188496d2a62591767f0d5493ce7f92e24dff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Filesize
1KB

MD5
1f29e056de3a2b73c281253b55c64e8a

SHA1
c384627bfa7a4f0912864148e68aa9a9aae7fc64

SHA256
7a4ac0777d4c2488efab07048fde2b3731f15fac474aa1cf0e632943a3af4f29

SHA512
cf04b16ea739cc98fbcfe2bc2e534e24bcdde210e654cb6b2f48855f5adfb97eb41601316301d5e3c4dc55e6ce20c1b6462816eea612bf916419b09037641bdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Filesize
281B

MD5
a85283a263709d841025e1a84c58a1a4

SHA1
8766f33c5690551b48795dc26546a750d0339e14

SHA256
067c2db30e731682360dc31b99d31a5c2ad91285f51286212c9113bf19032d1d

SHA512
83d0c3bda8b402c449ae9a4e01932140096cff77ec5a94f9ea56eca87fddb792db552f07907702966d24ab40bf2e7d4098d0b06243df41a6cdda1595f2f69662

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13324863411028750

Filesize
2KB

MD5
3573d6a5ebf18d0e239da5a4d56f6e53

SHA1
bf66407435f99e95a0ae457287dea7c417d4cd8c

SHA256
b4eaa0ab78dff07b243da4f09e2f3491e50b4dd9c641610fa0c42e7e1bebc434

SHA512
baddddc92dedb2b3e4d08545672297b2dcc3b830c502335a222ddfc6e3a5c070a2e2e77b8525d29a98605d919f491e220c94b62ac8e48cc800c85258ea64bd49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
112B

MD5
b8cf3087fdcbe246eb0105346c51f1a5

SHA1
406ceab6989527c97403d944206b83c1a555a6f0

SHA256
0c0e2b4c4e64c176ecaf14fd4f4e489702287f050c379d2e533427c2b902baa3

SHA512
84572a68262b9502e2d5bcb960ee12b0b16337cf146e50c669bb22faefd12cdc9ff83e2d0034b66dcfeec436c9bfd4ca2b5c65a9de7b4595fd608f75956798a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
726554d0d051805fdbe126167fb45f13

SHA1
8426bd8156f295df58fdefb34862c670ef76d386

SHA256
55c707f3d84432b4bbe1c29cb77537a66bb5c938dcf157ef4c9a0248ebf4883a

SHA512
aa25e22f8a70e100925c6c6cf936545e62869718196598bef172df50630a66cc951dc5bd7412c1d49cd63d00041da7326470ecbe571ec38a1df04c8d9541721c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
326B

MD5
8e7d97b13c8d7dd5749aaea91f3c6e41

SHA1
2a9001a91cc4746e70169ed6e565965115e0f3f5

SHA256
b599dc141be4d3a2ced7ec54ae0860625c1cd8717e274623533111f852d02fa2

SHA512
e2180674584bac1fe35dd3ed60e9d18e404d9f201211017e8638bb7bf5f2e7f2aabb15a75b5dd82d8f4230dc6ea96eca5b9f28a28c6e395c74a48c737c87f4c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites

Filesize
20KB

MD5
f44dc73f9788d3313e3e25140002587c

SHA1
5aec4edc356bc673cba64ff31148b934a41d44c4

SHA256
2002c1e5693dd638d840bb9fb04d765482d06ba3106623ce90f6e8e42067a983

SHA512
e556e3c32c0bc142b08e5c479bf31b6101c9200896dd7fcd74fdd39b2daeac8f6dc9ba4f09f3c6715998015af7317211082d9c811e5f9e32493c9ecd888875d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
204B

MD5
678e0c2e75beb08628f3b1df08855768

SHA1
231331c528cfe1e18ffd4b443d225498a45a208a

SHA256
7f650926ca8ed1b002a8de749bfd5b847c201b56e0ec47645fd79a8285a38489

SHA512
24fe783816d148b2fe2b93d7541bed8c7a210d8be293aeda78159450a85f7361fef62112bd7b1db297bf431eb3b442db6d5e79aa64f9c933620452ee3707db4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
c76b9fa72935eb4f9bb880a95b191586

SHA1
94e4576b28fbbbf2310d131c48f6556b06acd2f9

SHA256
ca32071d39b858723f0ad231210e099d29446f58d8bbed10184d9804ac5cf706

SHA512
0d74482312be6007cb2fa843431d088d91d705bbb92b947609ba6fdcf36812964e45409dbf63f82983def481f4e0deccaad4219c236de17d9bb48db13d8bdf60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
a2b2182396162efc1bbbb62d7b83ee29

SHA1
b7a047ec206652cdcbbbf6ed72659ffa84bcbf33

SHA256
9ad4a5c532ee4b9ffcb68d4272428393ecc275e7dd49744c0a9173eaa242032d

SHA512
9dd67a6e554f4744f86847ae933fca38308003a548be9485e6e76dd093a55c34d3dee005a4a08d06b4cc81d2206fd16437cfd6d626158e978049dc84cdcc3b92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
0b9ed330f9b185d5b5157998443427cb

SHA1
b82d22d09eddd6f818ca07fcf877a5d373084f80

SHA256
7867b4ccc22c5024c1be170fd3a6b4bbcd491536db24fe3ddac49ce27be7b7a4

SHA512
6d2212c3e7a13b2aa627d6d9f136d921800974161ec09aea304d8cc25fe379835f7f30fc861d01681d82b08201848509158b13800f0ab3393c71ab701089bfd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
b692df2c1701e30fb6e05c8a7e5939c8

SHA1
0cad4a66e7287ee3e170c7e97f1c6b732c13c2dc

SHA256
621812d946d272b9717bc02bf1cb18385e4c789cab3d56ecb004257f0377e64c

SHA512
bcc3b0e12d7368a9c9ac7f07ca76aee44159b3738ee1940b341d583f611592082924e67f68627700e8d6a43af442f14221ed30609899239ebaf6eb76615b6f2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
a0d9a0921757b46840d6ec5b63100147

SHA1
9b631561a532e93f35dd99d907248a8d8cd94cb8

SHA256
376b91a0f3e65be668bd59ae61dde53cefc4daa7e696a37817be6e35131a89cf

SHA512
da06288d805e2ce7a43e6f1e7e843a00a5c3ca7f48bf7c536684aae018fabec7dacac30bfda117d1c543fbdec09b83d9c5b2a4327a14b27c52d738cdf600e414

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
f5cafce7942f3dfa9bce48a0ca723633

SHA1
aa52f5652e726453080ea3fc019f61bb9b82f05e

SHA256
8662a8b3e7d3de9a6120e83ee10ceea66c7bc17f09ffc9c3fec0a236d5dbab5e

SHA512
53a9b361fcf30169ce5486a4a91a26944448a4385bbbf17149e9ed8225004d5fd7c09f27172543666af594ae09135e6a0161f1d8275de739ec51b9bd78c2a2c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
00079ff27fcecb65f389a8f443fa58a0

SHA1
be073a00b3c7f487c83c9f702be90829f2e960b4

SHA256
41fafb4fc0b6f1cfb83cce258b3dbb02cfb2cc1e46e4f5e8c955ef5c0c5e5267

SHA512
9f55da885ddf6e844a7bab7a8a3f0aa8889248c823ef5a301eae3702c4323d9d161d08b6b0ddbe20f5bc70c56accc00af6edb5648745edca8f109ef11396d8ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
1157a6de774aec80155786aa054487dc

SHA1
3fa49d9e6c7d9ceebc8a793e90f27ddcc1b719af

SHA256
0e77141f26f48ee78aad795e8fff240cdfdd1759909344426edb1dcc240f9f88

SHA512
545f4cd8f232583a85a3ba68f70022599cbc4f21e3e4bdd8cc1033a139d6f3124221c8440a9402b7b29cd4911def3c24dfc744716af26777e8ffc8c385b29c92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
a770a9d13487572c918657d184e9f640

SHA1
88e8dc85edb8ca6766a7fd67992c290e9a3b1aba

SHA256
947b14e0d0776cdc833ce59e358581e4b2afd4d8507554dbb457c7bcf12db9fc

SHA512
d0b4955e1c84e5ecad7e3b4a2808a0941cae24b6543c70ec6a5d9772193befa023a54c14ba33cb61dddc795761b0eb589ce728b81fc4b1da016bc99cb59621d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
296144e2a9412736509d39a61f9ca7ef

SHA1
91425f597cc80e55a71f00c70fab556bfc9564ad

SHA256
b6702cf01747eabaa19814a64442a1fec271b8eae6158f015941c9d5379c0307

SHA512
400dc7ed21220442e9428fda820b306372e905dc1def7f50677107e5a7390e13f98b47bcc9ffd91baebf0ac4ffc2f8b4fd2f399b5e24e9451999cca4d9adaf77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
368B

MD5
7a9ae2e696988ce91afaca5224fcbb9a

SHA1
9ad307f2d4528031a9acf04e0fa75fb05527ac62

SHA256
b6941fdb944ad15345cd36d619b21bc54803b5d0f39248d78eb4a3db0b95ea57

SHA512
6761fe72f0e22e2644aa31ff868d2be41cb21bb9a21d3b7b4124b516ed6a88395b3c6f6df9273d134c059642b54294d927a9d3f3b6af67f816a01e1b1f32d4ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
ec8f3285aaa4f90a6655a29267df30d3

SHA1
2613e40ca6a336d26e5e521e11ed4746c780e616

SHA256
aef68dd3dc672665ffa9e03ce4eee372bec6bac19a36ed7944314c44d51362a0

SHA512
d5fee7788f63f7bfb9e0d511ecd4d81912f453c2b4403797d9b5184ff8e8853bf8aad12ef3352180d1bd6bf4b2c44571dc5da7d2047e7ea96ac7f683be87ce58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
d59b28224d30c982e519602205fc30aa

SHA1
23e2906ad77498e3b8f395e1dc5e2d31ae988321

SHA256
e54e4e1e3f42c11a98bb68afb50d1990905e03ea01bd7f0259cded3d3533635d

SHA512
32979d75f751d3de543421f75caa17708b3f6ffa5a87a7c992fd2d5e39396da0d932324cb538946fce652947c4f80518cb0bf008cd6ef76f9c942ceffde2125d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
f8854c891397060994d2ba2b35cf3512

SHA1
f21418ce12136bda6da49f65881a7efb17e49f43

SHA256
e5bde842a52860ecb068c646616df7bc2e048c07d1e1cc662e5da8fd2c97676d

SHA512
284f263e8a72e4a3d07c0b890619545e010f11d895236597c75bccf327a4557f4ead14574a4e9e71a2f0d65652f05a8e3ae6975dd44115ad6e5bc7f70b068b35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
61a80818173e8ebb64e898065eb657ad

SHA1
3148c90186763a5cc8ae13029b43bf13305d84af

SHA256
112f7e6aa84581c978287ec5e7034d1e80f7609b289be2e0b1b84881e1ad3876

SHA512
67b7c139c74da383f76f75f4aadcb237f7477fb1ddbce09e5dc89083613af263475074b04ee2f03b2073bba84550aaa541b70b85c3cd7a01a28653aa1d0da16c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
9c341e6b65a4fe72dc962c7f6f917976

SHA1
9fe7868117b4ddbab664bb8ca9246a770ecd4fa0

SHA256
77d4fd57a8dc913676618cb410aabae743790df6209dc9f529f13e0bdd5bbf22

SHA512
beceb7cfe877c06af28ec8641328b2857a66317fddc8ec8327261c779302edc924f390554c9cafe4e6513ffc509e9d74cf8f1f0c245b0a63aaac0b131d63d4cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
70966579cf8dc22f8b6484112d2c4726

SHA1
e16c4f667fa734db035afd50ee3070fcd67da506

SHA256
09c3ae651994b1e3c387dd7db44fbf64cc00cd93541ad51bca27b261201bf340

SHA512
34d98064068c3939b87f8eae8c5efa35d76a18515e7ceb77626d8250be284d1473dde936edcf26e75bc6747982a5faaed8c97dc19af76a63da27e908ac87638b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
34bb72f220efeda24a682211ec95771b

SHA1
e7c3ce96fc3e5561f726b110d0a0d5e21eeef325

SHA256
491814e02e2c0e32a17c379fa05ee14719d6c4135ff8b73878bb145952cee318

SHA512
6363f645b1fc9a007c30a7fc89fe8b88f8cf0dec7b7ad33e4e09f0684221824e4f9aab11ef3cda71572fdbcef48a5b899e9deb23247d5e1530ae0788bab10cbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
c2e5dd2a17e1ae55736cae38f4da3184

SHA1
55f4e8787e2e2358e3ffcf0ebc955cf9cc5c8f22

SHA256
48d413992d7a1dab760676918a5c71fd6bd496a06ea762e618d6281f8547c79b

SHA512
d946ba3a6a775d6f8f99a9209ca4008f1482d4d7c92d3147d83a9e51fa60c2971b9377937587954ee9d9fa3759b434c1a4c94d5fcc595e9f4f462d074634009e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
116KB

MD5
f70aa3fa04f0536280f872ad17973c3d

SHA1
50a7b889329a92de1b272d0ecf5fce87395d3123

SHA256
8d782aa65de6db3538a14da82216e96d5e0a3c60496726e3541a8165bccc65f8

SHA512
30675c5c610d9aa32a4c4a4d9c3af7570823cd197f8d2a709222c78e2cd15304bbed80e233e3674ec2f6e33d1961c67fd6a46dc8ba8b1a301cd0722932c03c84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6de96ae-3186-4790-872e-dd971a9fc12f.tmp

Filesize
8KB

MD5
afbbb4c8295c5466c2191816ea4a792b

SHA1
ace7f8acc0723f96833ae75bd536b07297ca3eed

SHA256
c5bb42b739135af55df269a7fa087e52af4a651028cfc46d13d7a162cc3be628

SHA512
65c933f5443058a3e030550789634ab2211ccc64fc35a56603238719ed19febe96a93ae6ae72888806554cdfb70fabbca1375c2d6ebc57ce42948299c26431a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
44KB

MD5
31c5c51094700cc07dbb4b16afba260a

SHA1
1729d24c395d837c65e4331be0bb38875df7a85c

SHA256
44d315082583e57809e34c866f2c8d895bdb75355ac958cc41c5833dcf3c574e

SHA512
f107d4c0f8a1bd9c26330cabc9729887f77129356f7b8b31e6ad84db40ffe02548e9d528148932db4ea63d34aebcf98f858e2fc9326fe8331033f74351eb01a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
279B

MD5
4348bb5fa98ddfa19f8bd081c6f160a0

SHA1
baea0cb3d9bc6ebc934a7b4c2c75894e37daa976

SHA256
218795491d181e6685fb5244c314143fd77ae4537cdb00ff0b028cbbeed5ed24

SHA512
3f364c4fc1638082ff70d74a77e19512273d950d7e6b9997f328ccb42d9d26bca735a4911f80edc1877e9ad2731de55d45180dd766d561c29d7e7b547bb79f23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Filesize
160B

MD5
2e19a9040ed4a0c3ed82996607736b8f

SHA1
5a78ac2b74f385a12b019c420a681fd13e7b6013

SHA256
2eeb6d38d7aad1dc32e24d3ffd6438698c16a13efd1463d281c46b8af861a8ce

SHA512
86669994386b800888d4e3acb28ab36296594803824d78e095eb0c79642224f24aca5d2892596ac33b7a01b857367ed3a5e2c2fb3405f69a64eb8bf52c26753f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
297B

MD5
d6f6993e31d8e5afa375011f57843c30

SHA1
3c31f18bd9b73135fcff8991fa8fdbfdc9ddcee9

SHA256
57371930823a4fbb072ccfab39c073586fb5812d3e299886756443efafc4d541

SHA512
4e4225c7da7c2b13f9050b0012ec37f77485266593f57fe2fa603d8b05642cc62efde098c8fd72f4160cfa48486df92489c43da81a47222efe5cd773afc2e224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
838a7b32aefb618130392bc7d006aa2e

SHA1
5159e0f18c9e68f0e75e2239875aa994847b8290

SHA256
ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa

SHA512
9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
66021e173251dcbbe8fda5e26fbfccfd

SHA1
32f74d6530f8563473d0e76670533c410b96e52e

SHA256
ea872f9046062cb9f9e748b399945d221f1e9cf9a2caad36e50d6c518227571c

SHA512
7524b6aaee86068ab1a88fcb504901cf78165b304da8b3468599f7eb0f79db16d059998e577ed6792dc305b4249e0665e64cd86c64059351a1121da591318560

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
b1018fa5c16be301cbaf0b1fb4e1b44d

SHA1
1038351ced194a915f11f4853c02f9d666071ca8

SHA256
c62b36f76dfeebeca563f9832ae6e9ab59d530c6b12acbd68e3f09c859b29ba5

SHA512
5983cc57fb51cc0444e53a2f4735b33dbe3e6ef9ac0e5fe16f1df538a8b9e8cc42ae8539ac30964932f83718ac048df5d8ab9d64b97d0c5a7408a2bf3708fb4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
b77dfc710f898a67a4fedbb8ba000fad

SHA1
a9beec8e9a12e86636c35ac88c56234422b454b1

SHA256
74007ff9cd6e1aa57ca9ad5224d5a0938537c34b7e704d2204a0e2de168c56e0

SHA512
a46d3cbc497d4725d560eb6a0da4b829ee63cb28a6ad0757c5f592a104c9597d9cef587ce0f47a674ee24940d7f0e0d941f1d38509138467b95fefa8364c6fdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
d62eb48ea79d1f9c8b56ee663be4e648

SHA1
b7633a1914d826624e44163defb4b9c8adcd3a5a

SHA256
1a1c6c84431ecdfb8791ec350c85b12bca380480c70f08402c0c112cabcd636a

SHA512
f423438a9540925ccbac69c4b5b004a329bf0835d293bab594df99e73eef61237ad10084612ac816005bfe81e5cf68712155f72aa5b5073bcde8f435112bfc50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
142e9d905f55bfbe623c74522192e496

SHA1
1154ec8f87630e5d07972df5e614a9c0374bbc8f

SHA256
b1a027e4e15d0d5937fdd9c7c2f1bb696f2851dce68c928a1d850b2a7bc92f57

SHA512
99b53bc0e50884aeb9da69bb5eadecd607f6ccf4d1449283c73e4fb1bdd2c0239cef6d41a06f9003020a669dbde8c3af18a813e0fa0595ec5dae47444db8fb79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
3397a4b020f922937599d69b1c21998f

SHA1
0c76d8d5f500fa5e339298ca5b9e5ab967ba15c1

SHA256
a99fa37a1ebdf312cd45b3802c97f4e633e00e9d52d270849f6eb1a956d08ebf

SHA512
a01640a7faee443b32a6d9448cfa52ff606f3c0f6a59647a8a5d5e6d620a60b173c32a7eeac88f89c1278192fed406074945f3703a4932778b0832d5bf924155

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
bffc09c527968b8f1d11bd5fdffae830

SHA1
7df07fd359b6de008464d24952bf71955ca7d9d1

SHA256
f69035bb64a64adb1e6ed7127ebc813ed7f2a2804dd4a4da9a0eaa598e1928be

SHA512
1ac2af08ad7c73ae0fcc1dbb82030b5989c94f02f11ef745356ebe8644db438d19db29df71be620e2c223c190444bb972f426f82089726c4b38b484419dbabcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
34c677f4ceed2fd3ca078813ab7b064b

SHA1
dc51016fcb5ee8d9bb8b353223ebe5dfcea62862

SHA256
c831c121c28dc30406f0d4e3dc754fd7067f476206066b7e68d0f964cd7add2e

SHA512
a2c1f7a62a8e94ac34a6704645e2e6c696ddfddd3f518c3906c1f0e9ec7ec4035f515fc861a4c3c1197056b19ee3836b3001fa05e11641e73f304bb1469157a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
809c4f114ba0f3fa44cd1b011055b452

SHA1
7c679ecaceb8fc04b9c5b9265244349677d9a771

SHA256
968db3fa30f985120365aae85748b445af22adb7b830efd65d35c3d4eeada382

SHA512
babab012ca21007afb2e86b614dafa5bfbb91beebf234cbb88048deb0b34f4da0c9da3adab6bca52633710d62bb06d485365eb35b2cc9db6885487dcd1364c2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
c33f3e891b6a62b96e57e460fa46dbac

SHA1
d2caa83f6f7328d39ccc678f31c021d2cc66aaaf

SHA256
96da751dfb87f9f794ce0f81837f3eea199c9c7007e9e91af51d20462226090b

SHA512
a48a0ef80f547551a617bb0684a4608eb5e3b037b0ebd02dc20a4dc5e67cd0aba0f633afa059f924d730a2b6dc37af581f3e5ef26e5ab39d08f9e71f0b7b625f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
c09d79ebeef6a8b506d6f84424b95be3

SHA1
15ba16535cbb6a66a872c8be831954e4ce08d003

SHA256
2c47af7275a453f65a6849272ae76be4206b82614d101cfb65e742ac593302ed

SHA512
84dcdab388712bfd93afb0645a1a2a71fcdc9a1ba69fea69576520ecc9cdd63ab7dbd7804a676c5387d311296a26d11fa0dfa25f1e67d30b930650a489ee0e44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
66021e173251dcbbe8fda5e26fbfccfd

SHA1
32f74d6530f8563473d0e76670533c410b96e52e

SHA256
ea872f9046062cb9f9e748b399945d221f1e9cf9a2caad36e50d6c518227571c

SHA512
7524b6aaee86068ab1a88fcb504901cf78165b304da8b3468599f7eb0f79db16d059998e577ed6792dc305b4249e0665e64cd86c64059351a1121da591318560

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
5a022626a54cf82ecd1cd25490e11fe0

SHA1
50abbbf26c7e80473f6d1e16c147bf6948e787fd

SHA256
46fb7581dc3cbb7ec216d13068dd77d853d7357535d4fcc1dc0bd209823412e9

SHA512
fc20221270f57b535d7c3aeeefbfee286916c39940d286d99920559f0b6497c1375f797de333fbcd15150357a959e0461d62460df276c48535cab925558f64a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
26b7d66aa232ec43839625fe9202500a

SHA1
9302d7339d3145d2b8c8c408b281826ef8325dfd

SHA256
23ed11befb5699a5f91092292941602cd28e8c2a1268ecb8c1cd69048d4c68c4

SHA512
12d80a75396c97a6a9c36937ff47c6c05d3c909b4c470059a8c49b9b675fa21a8a302b29bea76bdccb42b20468ae89cd5185ac71cebce9cbd42c5f4f35869e35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
e631765d83d2290933bf3782af5b5f55

SHA1
44f7fadcb1e5edb52042357778e18a375afe3376

SHA256
f0d7fc726348a935cfd5d2dd3462603594baa284fb794ed6c60f5b637501e565

SHA512
e3a88c70389da2754a70eec7dc6b84a1ff45d75e673f6e727a53887f1bd42571ea78a92f9a5a6af20c1d8b4c61d2c2f8671c35778a4b40eb6a156c6fd58e6384

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
e6d37c4ebb4520f1907c165157426c51

SHA1
e81512010bbb7b017497a2d5d6c71ee96cbc2d4f

SHA256
009abc986c7b365af0e6552ccd68f1219f60d620c32541cc5ba09910f2b93924

SHA512
5a439f986216056788b05327c02e47e5e82d166a3e4665903e13e135c75f726282f5e1fdcb96dc26f420308da0479b27dca83c9426abac73e21cfce189aa9056

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
27b8f45b5039ddb6e885f03e2c7e27c9

SHA1
43f8e091ddb80bdd317bd58862b6367e8ac81929

SHA256
ee0bddd6089b61e3d55ccdb2670a59963864641420e9e223e87622f871d23585

SHA512
71daedfe7c4074089e35253dd4f6202931609f8b420f07f56072d5a10f49b3a5640e6444e79a2b6e495cfab21b993a5d51711563efc59d19e656668159647372

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8OI4IV75\suggestions[1].en-US

Filesize
17KB

MD5
5a34cb996293fde2cb7a4ac89587393a

SHA1
3c96c993500690d1a77873cd62bc639b3a10653f

SHA256
c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

SHA512
e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\activity-stream.discovery_stream.json.tmp

Filesize
156KB

MD5
d5144ab05c987c6ee7c19835eec91ce3

SHA1
399853a63bee1d8663f650d58cb71ceadf2fd1d7

SHA256
8cc010a1f5856b1ddb06fa34cf2f0052b51e5c1479e303848294f896b2b6827a

SHA512
d8b54193964e985043c3f8c0a3a6c965b9bd5537476e02906ba6f1cf2908873064b30e625424ce112cb5d92848e1548df96336b21cda9daaf2a4f26d7f0c59f9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\doomed\17337

Filesize
49KB

MD5
30f9604a554c11342b68136dc5cd181d

SHA1
9bdd95b027f84a64209a50a145fcbcb54f356966

SHA256
67f4157632b82c5a0c0eb91cf4e1be1764d0ec00ee7e9175c5cce96b5e47a963

SHA512
5442d01fd345aedbabd9e4d35d98ed0ca2e4d6028b3bbe068f6081d235f01c18036aba03e1d81c73ba10ad3a5760d8ee85b898cba6f73ac46bb598fc8c3f10ba

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\doomed\31556

Filesize
12KB

MD5
30e86bf148db7d0e357bacb60ddc7544

SHA1
f080d41ee6b08f3d769f60ec826150de12cc3fd9

SHA256
17df7e1e6a91cf6f60577d5ce1243390fc5d3ed523a98756e1fa094a64bbd1fe

SHA512
53c2913cfd7070db739b96987afe94249f32435a3a82b3fc75376146ee0efa59d41ecc0c754e2a3b9b3cac9f7f63956cdf96a5530d8377306a19105016967f03

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\doomed\4986

Filesize
9KB

MD5
5611d5f5bd6ab84b6124fd06aad24ac3

SHA1
40868afca74802b00a14170cd8055269c11bee10

SHA256
1eb6ed5f0dda251cea2cd2c0534ab7f502f10f9fe77f95fa24da861fdc88a791

SHA512
7413d711274958dd4e6193e85e6ca159c0c8f079951f4b0ab761060197d89ed6acf5ec5d226156c65bc9389cac9bf1ca322d1e7cd62654785fca3befcb8ea61b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\doomed\5537

Filesize
12KB

MD5
305584a733ad7029407a6cd2e5f469b0

SHA1
a7ea1003e58fead00dab1f4acbf67d04ebccca9d

SHA256
f03f94cb389a5988cfbed359e08062d46e82622597a78c7c1e1d97977eb26ecb

SHA512
1a581e8c8d8ca3ea6d8632f66eb569c1aac6e290d441e226a38154c7561883aa8913b4cf17a150ceb7599ec01e2061caa76d2094610d2c7014b9837027d3b54c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\entries\A4BC0C99327D7691FF360F07D11373B5791EB30C

Filesize
14KB

MD5
e009263d6807b67047f2637dbd9e229d

SHA1
f55ce1fbe8b12306f8c7a9e33e8b6450adfe3aff

SHA256
3f1915043befe310c9ccc99b9c0cf4edd1885ef5c4bfa6cab92d7cfb32b4e697

SHA512
11e5aa12b82cfb12601aba00e188ac7b529eb8b7a6c565c938e3523929c4680945f097dee50ee9bb12df79258dc0f6db59456b86e67efd95dda4e192381495b2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\cache2\entries\D5594A2648EECD01993B5C42919BA64ADBF56052

Filesize
14KB

MD5
e5c281671edacf06a4f06e4e1de505a0

SHA1
af7944e754b61a7712239a6a97ddc6ad2a364390

SHA256
5946d5a43644dfea309a81d9f982396079602603e83ae27eb0446e43906d6b85

SHA512
13ce7cc1680d5cd8088f853d4f59c499385af7e59afcf57bb10f2a66222d59f2658b4afe3cc47cb9229b4828d7c362280b21e2a9ca0b818132e7600322f0b3c2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\57nap2zl.default-release\jumpListCache\StLeDJiyo_zUHPFyi23Dug==.ico

Filesize
25KB

MD5
6b120367fa9e50d6f91f30601ee58bb3

SHA1
9a32726e2496f78ef54f91954836b31b9a0faa50

SHA256
92c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0

SHA512
c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
442KB

MD5
85430baed3398695717b0263807cf97c

SHA1
fffbee923cea216f50fce5d54219a188a5100f41

SHA256
a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

SHA512
06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
19KB

MD5
2e20d183e22f01386271c0866c28cdf5

SHA1
15172a6398d785c78e51bc4dff85c36e0aa73619

SHA256
d4902f8eac63328a9ddf7f606767cb86bbc492b48170eb5a4f7b4e230c3fa2d5

SHA512
e9ca39f378b90f787273c4e0283373ae2fa26365b2901957b7fb663facd8a8c4597bdd34d3429f1944b6cafd3fc516680e0fc6e00e4dd6050631a787fa31badd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
20KB

MD5
fb3ca843958c441c77948dde0cc8eb65

SHA1
3875b56959696a831de62e9e956049d6d3829161

SHA256
8817502448ee5137eccb6d619bef690bea7e7c08774d3f4a275918caa0086be1

SHA512
7a2a2cf1522125449107c0dbb8d37a54ed9148017472dd5c86d8caff59e4f07d3c36860864e32da5453fc6ea9f767f80534b4fb2291c192a73a238757cd4a2a7

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
3KB

MD5
fdefe855f20dde6f0ec043c2954b788c

SHA1
328421cceba72be3bf67d3c93ce7c23b59ea42b3

SHA256
472daf9a7790c204a5a4c0bfeec8d48f2c5a3e869843fcf07a2e4fc433acb382

SHA512
d36c58d14ea661675ca93e00c8b3269ab3decaa2e5a786bfcedc3bcb06c6878ad7f5a6165c4b0f4f480003083599992a128f49915ca980ce0d77aef0de234e04

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
7fba44cb533472c1e260d1f28892d86b

SHA1
727dce051fc511e000053952d568f77b538107bb

SHA256
14fb5cda1708000576f35c39c15f80a0c653afaf42ed137a3d31678f94b6e8bf

SHA512
1330b0f39614a3af2a6f5e1ea558b3f5451a7af20b6f7a704784b139a0ec17a20c8d7b903424cb8020a003319a3d75794e9fe8bc0aeb39e81721b9b2fdb9e031

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
c58234a092f9d899f0a623e28a4ab9db

SHA1
7398261b70453661c8b84df12e2bde7cbc07474b

SHA256
eaec709a98b57cd9c054a205f9bfa76c7424db2845c077822804f31e16ac134c

SHA512
ae2724fc45a8d9d26e43d86bcc7e20f398d8ab4e251e89550087ace1311c4d2571392f2f0bed78da211fcb28766779c1853b80742faa69f722b2c44c283569fd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
7d3d11283370585b060d50a12715851a

SHA1
3a05d9b7daa2d377d95e7a5f3e8e7a8f705938e3

SHA256
86bff840e1bec67b7c91f97f4d37e3a638c5fdc7b56aae210b01745f292347b9

SHA512
a185a956e7105ad5a903d5d0e780df9421cf7b84ef1f83f7e9f3ab81bf683b440f23e55df4bbd52d60e89af467b5fc949bf1faa7810c523b98c7c2361fde010e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
b1c8aa9861b461806c9e738511edd6ae

SHA1
fe13c1bbc7e323845cbe6a1bb89259cbd05595f8

SHA256
7cea48e7add3340b36f47ba4ea2ded8d6cb0423ffc2a64b44d7e86e0507d6b70

SHA512
841a0f8c98dd04dc9a4be2f05c34ecd511388c76d08ca0f415bfb6056166d9a521b8bc2c46b74697f3ecdac5141d1fe6af76dd0689350caca14e9f849ee75a8b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
63b1bb87284efe954e1c3ae390e7ee44

SHA1
75b297779e1e2a8009276dd8df4507eb57e4e179

SHA256
b017ee25a7f5c09eb4bf359ca721d67e6e9d9f95f8ce6f741d47f33bde6ef73a

SHA512
f7768cbd7dd80408bd270e5a0dc47df588850203546bbc405adb0b096d00d45010d0fb64d8a6c050c83d81bd313094036f3d3af2916f1328f3899d76fad04895

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
6KB

MD5
7d2acdc88cb43bd124528fbf845a926f

SHA1
073c33abe7108ac7c39b72345d8df41e4553bbb1

SHA256
3e6d263983001aa950d68adb98ede2494cba7889908f771b4001c812899f0816

SHA512
b8309162737ba26f32e013475da6c2f3e22e730615c9c6b8dc5ca09cf597a78cbcd2ba6d143c64b2c3dbc3ae166a66f56ae84b3cae1f58fc7f0a7c357b7649d6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
6KB

MD5
4bff46c890293180fd3d4005ab688daf

SHA1
bbf92e42e5fcf941c6271bb47a1133d019acca37

SHA256
f46bf8f57fb845c5baad801dd98d8917f3fa29d770458bb8b524d19756b3238f

SHA512
7a4ea894e709f5ce8f9b8d9eb0974b823ba2f822e189da83fdf786f671fca557ffa60b40637257d9ba37b78703ed3e3c3b179216c57f0c6dea7f8052ee9d1d74

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
7KB

MD5
6c0c966a02bc9ad12051e80bfc70de1d

SHA1
25e77f97c104d86d552f56e3540ae1f558c4ad90

SHA256
fd1c7d44c0ce6ff7683e3670cb123f93f941f4e19ae91a6749847676db5c7a08

SHA512
5db43ae1d7f2a6a3c7d868db927b651d94afc69cce6bb76830beb5d03a1547dcdcf3eff4d55da68132c0f352c935c4b8640f40fc5d58566bd0382e7398b2ed71

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
7KB

MD5
271b58aa8947d95f745050f9f54b92dc

SHA1
25384f87a28113724b421e15be966338bfbdf5b5

SHA256
ddc935465d8f288c73dcbbdd2e12502b7424da082ae385bd2685fc787920f9c1

SHA512
4ca6447730cdd18b863b452c0ce16c0f911b0d7be5ad6ac89739741dd5f988c816e10b674055a37f3343c2f911fb4cc1050acd667477063acd6d45aafe9fbd0d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
7KB

MD5
a7f3dd9b72e851dc53837456200a275e

SHA1
34c5699414a7cc06a96e948bccd64bbe6f912a45

SHA256
7c3b8aa31084b7a612720dfb4012870915b42718a232b602057ee97342f2e54a

SHA512
6cee9f92fdcbb82851121dfd089a901edd0a32e84214c64b6a3236e4bb7ab1bd6ff350d329ae4c3b2863d5d21f1a6afcef3091e2222e82a1c2c3a6f2926f7e88

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
7KB

MD5
26d62ec910f6a6fdcd57560d5e7ac1e4

SHA1
61c58ccc57241fed408953af5c9cdc2dd6e481cf

SHA256
3c47ba18745ba312d05a56bd5a87471197379d1cdab78a20f6426496fc21b46f

SHA512
f7c5d33cc2bbdb1785c0d8be086a32040565c1a82b50cc48907cf65309e661a3f9414e07e9a67c123666fd769893621c3ca43be991575f9b25cb334470d55a86

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
7KB

MD5
9f7d33881cb41ff72290c82cde866125

SHA1
9cce3f0d2c4c4272c68e9418e0abc835406facd7

SHA256
1f5c4443ff9a1bff41afeed3317f3548d3f9dfe320d7ab266b4fee96dc993088

SHA512
7e3c7b484f0fa03e30e79c5692e8a7dacc77aadca2f5d1bb9e54f25827bc00de1563ede6706d4ddf4fa52ccdd85ce215f077eab82d27058127e70b60cc6ccbaa

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
8KB

MD5
9b655660c206583cef3a9083f0831504

SHA1
e7a3c26a8eb8a12fa3aa36e0a27c98f1c3c676b9

SHA256
a112111135b139123016cf66c032af9a2d44bff4bde5a003ea7cec9a8b5e34e0

SHA512
7329c34def299943d73d69b12032d7dba4b794b3254367d4e1f0d5a403d67dea4b05e22ce477c160916263fbe1c6665971f6e2273057cffa96a373870f1d26e9

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
10KB

MD5
6303b424f96357022a9d82adbe78c9eb

SHA1
949401a976640ee6d8f13e3f9f2d2027c3c7e05c

SHA256
5cedb0b2826d90194790ab721032c9ddb241c5492f5412472294d931063864f7

SHA512
d843a30049648622eb989d190f8922ccecfe2d9f997abb96449cee4405fbf6becd00e14e54dfd878622ad77370d576b16a8f66c9b1e7fd302d8a2d5be6912261

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
10KB

MD5
75f44b3099d83e873f98c3ddea702501

SHA1
b84509e75ef95eb6a48b6391a50adb2b7909d19c

SHA256
143ddd1158ce7f875e511274d7f77d3b51aeee583a89032a5abae761f913b000

SHA512
8f5a846a103dd1ce27658b15c45cf9d5bdaed154d1a1e677902990aeff50c666c74d582436373e0ef475bbc9e933dab68a7ed8a1b6609aabf8fe011a732262b8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
10KB

MD5
f9ad52f820d3ece8b7f695e2de8f21fe

SHA1
c0872968a44020107f5f2b0b4fc6c2d5f839b382

SHA256
9a9428b3af5c83f41395f4d66ace9880e9ba61fa0256fbac3b2cf3d79174e7d7

SHA512
164a5d8099edda0ecb7ea5dd81e76b3aa9cfd56f1c728e5cdfc03640a8ccec08886f50aefbc8a971ba17035b3611ed08064867cd7fc05af6cdb0235fd845af8a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs-1.js

Filesize
10KB

MD5
9861a6c0e3f0b85501771baa28829454

SHA1
808c3680f4506045acfaccbd11f00fead4595cf1

SHA256
af434484f22523a0281f7cb89ed6e76e780a640964640868ec9fe38bf25ff5bf

SHA512
b761af8b01b951ff9bf0dfe5895bc102a08ef1211e5ea7b8f158d54c18b7824e4d7361fb68d899aed79f390683f6c36ddea035f0668da6908e42f826e6443ba6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\prefs.js

Filesize
6KB

MD5
feb8a52858c8167a58f36caa1b37f116

SHA1
7ae7f9d2721ae3c579f9e18e4fea679e8c848158

SHA256
adbc4c7b5e775c3d401ae811d5be5a69b844f5937e3d0a416d374dd5a7ec227a

SHA512
109d42ec5b9744b3561d29a9cabdcf2ffb81233935fa5c2d80c39f27b92ae55366c3c51ae3d26cc1a8936635662acbd11af89e54efac374aceaa279f13e7dc16

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
19df6ac70af0db18f3d7bc6a204d20ae

SHA1
e62d8bc61948ff0af12896726494231637933db7

SHA256
f1b5e3a560caaa54114c2bf302637525031665bda31621bc695c66fe09da6252

SHA512
ab4d13774d61c1c67ca11a3a506087b1a45ac8cdb76ca8b65d5cf55948655ad20e903b9cc3ffe9cbf72b4bd3201c42d5439988578549ff22a81f5f1f919788ac

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
2KB

MD5
62754dfd23642a0a5fcee817b5938cc5

SHA1
8a43fcfa939515067c0f2e6e3ee36cf3ac51e9f7

SHA256
efa247f2770ef69ebc3a715a5e9124410e1c0c90350bf0f03fe8dbe0735834c1

SHA512
60c12c5b4f0367be75e7ee67eba5dbd27304cb50a9f0c3ed6bd8de83c5fb663ce123029d67e2a3c59c1fcd2ae9132710239023379512849da3e16a3f2a33429e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\57nap2zl.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
1.4MB

MD5
a24669a97fe55aacb248f88142e83d6b

SHA1
7ec32a0e4d227e678ac5a194d6e8b48c741ff0ca

SHA256
97c82629c32d656a978fa247d9364c083484cf01c5d96d0f2363745ee9075ce9

SHA512
949a4f74bb715748b77b71ea0a89494823b1f4367308d48673efe168529bc2ca554982cb98b7fc2c9fa02d5c3d6dc32a68befc21f2d492941260029e9ac045b2

Download Submit
C:\Users\Admin\Downloads\gr2hkQ8a.zip.part

Filesize
8KB

MD5
69977a5d1c648976d47b69ea3aa8fcaa

SHA1
4630cc15000c0d3149350b9ecda6cfc8f402938a

SHA256
61ca4d8dd992c763b47bebb9b5facb68a59ff0a594c2ff215aa4143b593ae9dc

SHA512
ba0671c72cd4209fabe0ee241b71e95bd9d8e78d77a893c94f87de5735fd10ea8b389cf4c48462910042c312ddff2f527999cd2f845d0c19a8673dbceda369fd

Download Submit
C:\note.txt

Filesize
218B

MD5
afa6955439b8d516721231029fb9ca1b

SHA1
087a043cc123c0c0df2ffadcf8e71e3ac86bbae9

SHA256
8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270

SHA512
5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

Download Submit
\??\pipe\LOCAL\crashpad_3048_UAZYJOEINIWVAFPI

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
\??\pipe\LOCAL\crashpad_3376_MHEKRRHDTUZHAMAF

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit