Analysis
-
max time kernel
451s -
max time network
461s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
07-04-2023 08:00
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ 3.0/MEMZ.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MEMZ 3.0/MEMZ.bat
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
MEMZ 3.0/MEMZ.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
MEMZ 3.0/MEMZ.exe
Resource
win10v2004-20230220-en
General
-
Target
MEMZ 3.0/MEMZ.exe
-
Size
12KB
-
MD5
a7bcf7ea8e9f3f36ebfb85b823e39d91
-
SHA1
761168201520c199dba68add3a607922d8d4a86e
-
SHA256
3ff64f10603f0330fa2386ff99471ca789391ace969bd0ec1c1b8ce1b4a6db42
-
SHA512
89923b669d31e590189fd06619bf27e47c5a47e82be6ae71fdb1b9b3b30b06fb7ca8ffed6d5c41ac410a367f2eb07589291e95a2644877d6bffd52775a5b1523
-
SSDEEP
192:HMDLTxWDf/pl3cIEiwqZKBktLe3P+qf2jhP6B5b2yL3:H4IDH3cIqqvUWq+jhyT2yL
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
MEMZ.exeMEMZ.exedescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation MEMZ.exe Key value queried \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation MEMZ.exe -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
MEMZ.exedescription ioc process File opened for modification \??\PhysicalDrive0 MEMZ.exe -
Drops file in Program Files directory 2 IoCs
Processes:
setup.exedescription ioc process File created C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\d6dcb550-2e5b-4e72-a92d-9c71adfd66bc.tmp setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230407100121.pma setup.exe -
Drops file in Windows directory 1 IoCs
Processes:
mspaint.exedescription ioc process File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
Processes:
Taskmgr.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 Taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName Taskmgr.exe -
Enumerates system info in registry 2 TTPs 9 IoCs
Processes:
msedge.exemsedge.exemsedge.exedescription ioc process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Modifies registry class 1 IoCs
Processes:
msedge.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ msedge.exe -
Runs regedit.exe 1 IoCs
Processes:
regedit.exepid process 4724 regedit.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
MEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exepid process 4388 MEMZ.exe 4388 MEMZ.exe 4348 MEMZ.exe 3940 MEMZ.exe 4348 MEMZ.exe 3940 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4388 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 4348 MEMZ.exe 4348 MEMZ.exe 3940 MEMZ.exe 3940 MEMZ.exe 4348 MEMZ.exe 4348 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4388 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 3940 MEMZ.exe 3940 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4348 MEMZ.exe 4348 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4388 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 3940 MEMZ.exe 3940 MEMZ.exe 4388 MEMZ.exe 4388 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe 4348 MEMZ.exe 4348 MEMZ.exe 3940 MEMZ.exe 3940 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 4348 MEMZ.exe 4348 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe 4388 MEMZ.exe 4388 MEMZ.exe 3940 MEMZ.exe 3940 MEMZ.exe 3808 MEMZ.exe 3808 MEMZ.exe 4560 MEMZ.exe 4560 MEMZ.exe -
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
Processes:
mmc.exeregedit.exepid process 5632 mmc.exe 4724 regedit.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
Processes:
msedge.exemsedge.exemsedge.exepid process 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5840 msedge.exe 5840 msedge.exe 5840 msedge.exe 5840 msedge.exe 5840 msedge.exe 5840 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe -
Suspicious use of AdjustPrivilegeToken 11 IoCs
Processes:
AUDIODG.EXEmmc.exeTaskmgr.exedescription pid process Token: 33 4932 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4932 AUDIODG.EXE Token: 33 5632 mmc.exe Token: SeIncBasePriorityPrivilege 5632 mmc.exe Token: 33 5632 mmc.exe Token: SeIncBasePriorityPrivilege 5632 mmc.exe Token: 33 5632 mmc.exe Token: SeIncBasePriorityPrivilege 5632 mmc.exe Token: SeDebugPrivilege 908 Taskmgr.exe Token: SeSystemProfilePrivilege 908 Taskmgr.exe Token: SeCreateGlobalPrivilege 908 Taskmgr.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
Processes:
msedge.exemsedge.exemsedge.exeTaskmgr.exepid process 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5840 msedge.exe 5840 msedge.exe 3484 msedge.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
Processes:
Taskmgr.exepid process 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe 908 Taskmgr.exe -
Suspicious use of SetWindowsHookEx 21 IoCs
Processes:
MEMZ.exemmc.exemmc.exemspaint.exepid process 2868 MEMZ.exe 2868 MEMZ.exe 5412 mmc.exe 5632 mmc.exe 5632 mmc.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 2868 MEMZ.exe 5716 mspaint.exe 5716 mspaint.exe 5716 mspaint.exe 5716 mspaint.exe 2868 MEMZ.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
MEMZ.exeMEMZ.exemsedge.exedescription pid process target process PID 1364 wrote to memory of 4388 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4388 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4388 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3940 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3940 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3940 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4348 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4348 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4348 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3808 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3808 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 3808 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4560 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4560 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 4560 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 2868 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 2868 1364 MEMZ.exe MEMZ.exe PID 1364 wrote to memory of 2868 1364 MEMZ.exe MEMZ.exe PID 2868 wrote to memory of 3152 2868 MEMZ.exe notepad.exe PID 2868 wrote to memory of 3152 2868 MEMZ.exe notepad.exe PID 2868 wrote to memory of 3152 2868 MEMZ.exe notepad.exe PID 2868 wrote to memory of 5044 2868 MEMZ.exe msedge.exe PID 2868 wrote to memory of 5044 2868 MEMZ.exe msedge.exe PID 5044 wrote to memory of 4012 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 4012 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe PID 5044 wrote to memory of 3692 5044 msedge.exe msedge.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /main2⤵
- Checks computer location settings
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\notepad.exe"C:\Windows\System32\notepad.exe" \note.txt3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+get+money3⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:24⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:34⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3684 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings4⤵
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff7d28b5460,0x7ff7d28b5470,0x7ff7d28b54805⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=virus+builder+legit+free+download3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+remove+memz+trojan+virus3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 /prefetch:34⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:24⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3600 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5308 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5308 /prefetch:84⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3700 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2172 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2956 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3636 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3644 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7352 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7360 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7088 /prefetch:24⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8316 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8052 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8564 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8440 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2208 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8556 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8736 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9120 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1332 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9168 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9464 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9236 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9244 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9720 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9508 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9992 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10044 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9268 /prefetch:14⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0xf4,0x130,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+send+a+virus+to+my+friend3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\mmc.exe"C:\Windows\System32\mmc.exe"3⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\mmc.exe"C:\Windows\system32\mmc.exe"4⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+2+remove+a+virus3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\notepad.exe"C:\Windows\System32\notepad.exe"3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\notepad.exe"C:\Windows\System32\notepad.exe"3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf4,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+20163⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\regedit.exe"C:\Windows\System32\regedit.exe"3⤵
- Runs regedit.exe
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\Taskmgr.exe"C:\Windows\System32\Taskmgr.exe"3⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=batch+virus+download3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=virus+builder+legit+free+download3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+send+a+virus+to+my+friend3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\SysWOW64\mspaint.exe"C:\Windows\System32\mspaint.exe"3⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47184⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\MeasureWrite.mht1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d47182⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:32⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:22⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2960 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:12⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x518 0x4b41⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD50820611471c1bb55fa7be7430c7c6329
SHA15ce7a9712722684223aced2522764c1e3a43fbb9
SHA256f00d04749a374843bd118b41f669f8b0a20d76526c34b554c3ccac5ebd2f4f75
SHA51277ea022b4265f3962f5e07a0a790f428c885da0cc11be0975285ce0eee4a2eec0a7cda9ea8f366dc2a946679b5dd927c5f94b527de6515856b68b8d08e435148
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5425e83cc5a7b1f8edfbec7d986058b01
SHA1432a90a25e714c618ff30631d9fdbe3606b0d0df
SHA256060a2e5f65b8f3b79a8d4a0c54b877cfe032f558beb0888d6f810aaeef8579bd
SHA5124bf074de60e7849ade26119ef778fe67ea47691efff45f3d5e0b25de2d06fcc6f95a2cfcdbed85759a5c078bb371fe57de725babda2f44290b4dc42d7b6001af
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5163202a097983b20ce2bc01b538ac220
SHA1d6687b7a0da5b733e677f7f9bc909527e97ff748
SHA256031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e
SHA512dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5163202a097983b20ce2bc01b538ac220
SHA1d6687b7a0da5b733e677f7f9bc909527e97ff748
SHA256031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e
SHA512dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5163202a097983b20ce2bc01b538ac220
SHA1d6687b7a0da5b733e677f7f9bc909527e97ff748
SHA256031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e
SHA512dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5163202a097983b20ce2bc01b538ac220
SHA1d6687b7a0da5b733e677f7f9bc909527e97ff748
SHA256031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e
SHA512dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD59f59d0c802ed3f10fa0410a93edead97
SHA14e965b1e401ed9474d7ed7c756cf52e56461f089
SHA256de4bce7311cafe22da29e12c4fa08a857e6e4aad557989ba4d5eb1c893d2c013
SHA512c45caf57de9f9c1899ec01e0437258effd593bfb5357e6bb41a30a7dd98e9d0e39822c5e930f0169d9b5e1730fca7bb001bbdb018b98708a2930ca4154d4e327
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD544924e76f55ffe7d00fe9197dfb4d404
SHA1016ded869fec5f6512b873b4bd91f140eff6c464
SHA256d88197f0cf820cde728830770eef7102d0ab84a601c095200c0c37223648cd30
SHA51229b474cd97104ff68af5a60210ec8199251e68cb8c8e67bf49c2d95f018e1bad4f74cb170b77841ae0de36fd67112a69e841aa1f965fa7a910b465faec73aff0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD532cb3d04f35404c7a241093f0425cc6f
SHA1741b0fc3d85d385d29274903195a30cbab5bda8f
SHA256444497250400cc46a8678c62ad9c6d7e82bfeee3f26a83f5723e3bf5fa02077e
SHA51297af09be0d2d333e76e1eeb9c2e55a2450b5767d9a66ebf8b7392597bfe778c72614f19b512e26787fceb3baf74ead276268d73a234b11325feaae4983e8c365
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57a6150a-ea23-4a58-856c-3fd20a0be611.tmpFilesize
14KB
MD545502339b86cf7fd346542e9483138cb
SHA1be28135990c744d5477e5415621be7eae0bd71c1
SHA256d127eee7f874317a06df52eb2067123edeb28039e64a4f193d4466bb20e0a77e
SHA51257c7fa866ab98e40a9683ebe650f5ea457ad4297531b0d4517a0090ee7792ef79414163c26933f16e834021bb2fe31f31e816cbd1d3d920834308e2670b17340
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022Filesize
16KB
MD5bd17d16b6e95e4eb8911300c70d546f7
SHA1847036a00e4e390b67f5c22bf7b531179be344d7
SHA2569f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352
SHA512f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023Filesize
19KB
MD50a14336abbc548520813b828af75c79a
SHA1086f5856abab29bf91f379277375b307ce0e1aea
SHA2561195b01401b90ddf6d350479b6e29625279b51b28092da8e903c986577dc306a
SHA512e663e5e15220ca32cbbbde9ca17e43c91b814eafae4d01de4cb75e67cf7543b832fce268804c6cc48eb32b51ba40e4f187e6285fa1c84a6ed8b2da9a3e49164e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024Filesize
73KB
MD509867090187e2af4a9823a9bae1c19d9
SHA19392a25e16dbbb99874c883a333e6b5262c89cf4
SHA256a252cb0147f7cd2b42ea5077e8b56e511e767dc75a37cbf797eb32f297098b18
SHA512f616b8551b5e54efa1a4a3229a83192760bc6f0e8f394629fdd78fb9c33c6ada5f59a3e106839563950a60ea354d348f5e998c889a1859e9d6ce2ae770b4bd0f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025Filesize
17KB
MD5bbd974f4a2458b542da5af56c1e81032
SHA19be0883fdbf1c1318f9fc0d105bb1f0d19c94004
SHA256915e257dd4d0a394ea0911930f9bd98f5ef3809ccda5913c774612f65a7d8b4e
SHA512dc0cfc94e41970c7db45f7451f0a9ce2c18efdc3b8e9c1f9352c0580a5c9d3cbcd4da36fb2bd75ce2cb4167e566ca752c18a921d75f1e7879973bedb8c1018be
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026Filesize
108KB
MD5077814f520789fe3e2589f82397df9e4
SHA132b281478a0289fd3e9960b7685d3ff4029a3165
SHA2565c1aece00241d3a03ced1b5b7725d9ea4045e46774fcd6edee40e5ba3be5c6a2
SHA512df15b6925b0991fa287565fc9641588f5594509880f82b8594e81e7926f5fd1a85111841895380ae9c022262e3aa160e17fcd582f1bf380944f41939e6db524d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027Filesize
25KB
MD5f0e6b81f399eb6dae59a1878d616f667
SHA133b323c09b5427ad35dc37018390bf1a3c1949f5
SHA2560e380896a393abb813e08c36416bb87df5f7f733ff9dea4cb65828312b6e8c6e
SHA5122a556880461a7b7e9278fd81bcc74377206dd967aeb141385fc8eeab6ef95825f57122d975d7ce4f932744fabbf7e95eec0ee17351d0db38c79939621e3fbf25
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028Filesize
17KB
MD519c73397068ded824edd2c5b13d0a9da
SHA17f0f149b66309aaba41974d524ca69390a34e4f2
SHA2568c93e33fb098c30a82d774c6a9db9aa92ea0e34586e907ed7d9d2935582c6100
SHA5128795cd26570fe65181d49676dd9cc9a8012bc22c3e505ac8ed8c1bea68ac7db7f77d6bade360a403a8d79cc4126ac18c2c10e3b83a163e3b42f2e3f60c32426e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029Filesize
54KB
MD5e4a1df25ea46e1e7cbd471de0a7b45e0
SHA1324e3bebce9ef6403111bb6056ba21016222675d
SHA25610e13d065fee3e595d4e9c9ff4e411d7303861ae88819b79c89070813d03723e
SHA512d06649371f9e4bd407f8db42253eb276bf89edb26ff3c82ba6ed38e7ecaaa9a32b4bd3f11ca41106bddff4f6e6c6810fa3806de73c746d2aebd5ae5ba4a6887c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002aFilesize
19KB
MD583bbe8c9d8c062d6e6e0398d7fc1fff0
SHA196e997b75f82fb4e9b99d5a41740c5e63e15ca04
SHA2561e725b632cfec5ba1ba5deff6bebc8a0f5287c5e7a59f3d33167600f0eda6f04
SHA512f657866170a8cca3fd446c198fb1c29a6ee524a037235e66db88d2e2f09af260463a5db0880e24bf774082251adde272343a580fea17a2a7663137fd024a9646
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002bFilesize
50KB
MD592b33aca764284ffbd132990fd22b61d
SHA1a0b3446eccc7579443e56c9258acbff5b2c9b00d
SHA25674a8fa4401d4632196b63b1c5fb05e51b1a6da769ec88ac524aef6b580ffaac5
SHA51202d9c778eb78845e4e432eef585d171e7115a09152ad7369e2dcc213c9beaa642c17b6b0721243275f9058aae6e8d97aeb192097b4709fc07c2f4436db2ecbb4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002cFilesize
18KB
MD5364643c24ad0e8c5b1c8db80b3f49bf2
SHA1f1d7310e9b5f35039e706bf3621b891715cbe6ed
SHA2567c7be964fb6bf26fa760adc8b97065735db7c78271fdb386b08a31366eb77f68
SHA5122c5a1a81ee326e4d9a6c12fb0ee02af3f89f75755d8157121de8b9dea1be85010fb849c0f6deefb35e51c3c22610118a5a68db38271ee9782ed5b2e79d4e56b0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002dFilesize
122KB
MD526afa1247926d8a4e9e57257b2dead48
SHA129efc829d5965bdb731d3e5b6d2e09654dfc130f
SHA25672a224158e86feb2fab78ed652a34dc0a94457ca491f4c82510c9e52d33673c6
SHA51223955db4e2cadacf17dc857c62f1a59e6d5a7e8aecd807e75b6c591239fa83196b661851f8375ab2bca262e03237c486393db1cfa55423534bd3ccf7f8cdc330
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002fFilesize
16KB
MD578c571f8c1e949189766dbabb7057d3a
SHA179b01b145f4de8a05b0545f220552b96053ebdad
SHA2569d1c9092619c7d8d4d88eab55281f503a124dfca91a3b165beebc75286d92c0b
SHA512827bf0250fcd62b5b6ca76ab055077126afe7530b00f3a7606edc078ae1e94df616c55d876a4770da9c266ab14430f866e547cbafacb1ce426412ec8739b9152
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030Filesize
19KB
MD5ca7fbbfd120e3e329633044190bbf134
SHA1d17f81e03dd827554ddd207ea081fb46b3415445
SHA256847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
SHA512ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031Filesize
67KB
MD522434a1a358ac85abe874fda15be93c5
SHA1f4e986a8e4647693ba7e571566ed80fda26e63a0
SHA2561fc781e941db1b2c6e1ad04cfb4007a20be5bfdc151c5fc12a11df34b337b3f6
SHA5125611cdda4459006b46d8db7c7648370cc6bbdb77c870f4d14b3bfa79cb7b1c7a3b707813013d32aa5859ab587ae9564fda6b70a72d280b500e3e99ebfc8197cd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033Filesize
16KB
MD59c6b5ce6b3452e98573e6409c34dd73c
SHA1de607fadef62e36945a409a838eb8fc36d819b42
SHA256cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA5124cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038Filesize
72KB
MD5d351e1ecee420d10286f89a2a61f5401
SHA14159fc11bdb606779e3ba41247279164dfe44020
SHA256d2321fb2d72d655bb0efdb178a1531e2a64076ec80c8b783971311a9bac4279d
SHA5126060a0316a49fadace30d8ee82c827e44d73245eb0d6068bb40e1705e52315d91b148bee9fe0dc3583eb34003abac6abfa40e92ba991cb16895fa392848f07f6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039Filesize
120KB
MD54a3fbe005b44daa6f0edaeede2499534
SHA1edce10b994a9f36fdd0714ae7a114bd9b70d5bd3
SHA2563d92730b8b5eb53f9323d461ad612113910c013fb0a0dea416d954ad9f578f9c
SHA512564ed11ca5f4e30beece6781e49fc29a7d3ea48383b6df2d2496acdad4c459461556efbfee88b1bb29967aee76d658b1a635dec1ff0f7855fd891c318abb63eb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003bFilesize
278KB
MD58ca5b4c94bdb9059b420f716c641beae
SHA16d0b9ffbeddf43792d909d697c9d893287b5c89b
SHA256dea24dda6399ee36e9e3a9a330025d87ef7857412e9851945b053f19727ca695
SHA512c744b390521f9b575a88de078986b701f20aef1ddd1bc7d050ab63188b2fa23f6f22729206f97d1058c7d4f7b2eefa1591a22ccd1ca9c9b7c2f70f329ff02819
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042Filesize
25KB
MD551b6e0aaa809ce8aa080d68c24acdcc4
SHA1052b0701a2aaa74d6dc2e5e09a31b644bb04e176
SHA25645d2471f4a8596ebd07428c2385003af6d31a2e7bf0e59a466455c9e00c2a811
SHA512207f91fe7c0c84711770a98df1397a4acb065542d8878fe07b30521b66046a8b2dfb54705ecf2d03e060acb1072c008eff1b9976d723afa0338555047bdc4371
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\98500eae0293259d_0Filesize
16KB
MD55f816d51b0f664fbee137d0cc5eab9d8
SHA1d8c248940d9da4065edbcc7255c1975716674e7d
SHA2566c0e6605b01bd26d2414f0a5d42fa4a4519007ee43b58baec2a5a7c72e2849a8
SHA5129dbacdcb6331969c31f5bf28b3dcaaf935792a3d4afd5e494ae441d9edd1754d3c8b3dc8d55752610fae2da71e6d5eda54c11b483fd2525c27e5babb8f205ab4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
2KB
MD5ad09e8d557a730fefa6adc092bd467d6
SHA169e1884923e61152ac8edf42ad778e26192b3fab
SHA256dabd0f7760c10cab81188cebd357004ed4eaa41b6e994ce2e86bad11cd5bfe29
SHA51251ca40a1e0a3fcb44754d74ed33cd39f6d7eb68f8ad09a179674d30affb6d03aa2e3f4673ba363c13058655a74b8f58c0cfb69e42fca3d72e9d5e61682a85cc6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
2KB
MD5f365430e18e1d06046c368d74a69335b
SHA15b1c0e330453ecb15636c42cb45e4d7974b1f62b
SHA2567854f85ed97529927659e9191847b0c1f9c82121b9be01e00805c760d2872201
SHA5123ae57678e24a82833bc445fa9e0a0e2497107d521866dec893a9f976175966a4201eee1b5523ddf4de8b1372100345c1feea3bd7a7c9e61b4a5c5ba7ca3da68b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
888B
MD5b57f6b66b23a0d346e3dbdf599a73a54
SHA15822dd9a3f2fb39f6f4a1299862a07db1c37abd9
SHA256f68f6e58942f53ab435699636eca4c975fb12ea770982e625bfdf0dcbc0d1e81
SHA512080554d901245763c11c30f05f8b3b39a2f54188a19c440a901850ca9295ca5cce90e1c5cc94b5826e6f8014a957bdad68d1e40b72b5949e5fbcae486f15f38d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
888B
MD5b57f6b66b23a0d346e3dbdf599a73a54
SHA15822dd9a3f2fb39f6f4a1299862a07db1c37abd9
SHA256f68f6e58942f53ab435699636eca4c975fb12ea770982e625bfdf0dcbc0d1e81
SHA512080554d901245763c11c30f05f8b3b39a2f54188a19c440a901850ca9295ca5cce90e1c5cc94b5826e6f8014a957bdad68d1e40b72b5949e5fbcae486f15f38d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
1KB
MD58f0fa9d276d701123231f522c5ef509a
SHA18052cbc79a2b1ed23e4d810bebd54b856b791cbf
SHA25682952a0432ead477c20fb38ca3148a4078285581c4385b557cd632e1b6035439
SHA512867069d41ccc1f0d0c9787cfa9b96901580eab5ec3c2d6cb8a621a22d2906be0a726591555e213676d70bb7df69aa800e5d4f8b271c766529b018bb32cbdbabe
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
2KB
MD5e868f0b8ad4ac767a27aa06e2854927d
SHA1657e89fc9885defe6263067b748d0d6fb2800669
SHA256f4dbe52d2f0547b1cb801e5539daf75d96aadea15d5e6ebfe4ab8248520773ff
SHA5124ec9a7210495faeb5717010e20df8f26539160292fab5607c86484df5c4bd1041c96b16e83681ecc6caad4f19a1278e40b1a03367747a371a47bcf1a64d1a0d5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
2KB
MD509e4c2af1864c4110cde8defe6ab357a
SHA133614d5a691fef0006b3a655db0881191f4b1f19
SHA25676b752a5f55e943afc6b075deb722f41bf3b5790977fccc118a88fbd65e3c038
SHA5126dd71a57e4de3199a148749b417ee417f584b50da1be7de8c8a276470c369a80f3609af3c390ace845c79d692efb1d3b4be699a3f8a6c8a8771c9f65e3b049e2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
1KB
MD56070f2e8e88746c054af18973acd765c
SHA1816719e09d7ff489b6b5bdd8824cfb65efa65e42
SHA25628cadd9b17183fb212898c91266b4038d39569b2d26648ff50681650785d8c4c
SHA5123209e1b9ce84d196212d841570d0d4bad104fcabe0afa8118f349b17a1e9ad708fd3aef2e99d9d903780b6060dd5913896d4bbbb06f94d9f98b2e17c3cf679f6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
2KB
MD50e0a1448fb87c2caf75bbfab4901fec1
SHA18baeaf9f00c8583e6cf43e3fa7300f72a77622b8
SHA256fe077d78738eb588223d72f438eaaa582993669678d22dbbe0df357bc01efebc
SHA51209cd8ac49f47e1d7c0494a0fbce4b100a425abc381298a652d9774babdd2d144cef50d75d0ac41f5ded50fb399521dff0652406475fbaf22c94191becaa13c16
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe579cdc.TMPFilesize
48B
MD56a58ce86f36e82e456469f903e79fdfb
SHA1925609e11201dac333086c76802af31bd6c50e65
SHA256c76b300bfffc43607782c47abface7851ce2f5c9d5ac5d21cb7e2e0fea67a494
SHA51291c0f7c8008ac23ad86a6e4ef8d97a1b814736393a2f25a389b1c0ed1a5cf78ad192d080b1687e491630efbadbd2ceff004a277f06316be3c5c6c2295b0d7eef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-indexFilesize
48B
MD5f96fca2b0fd94434b8940a9e3002cc1a
SHA147837ad7742fbf4ed12cd7619957ee4e2acac988
SHA25633bc96b0185ef3da2e494a1376879bc23cf9664ed884eb562d202858cc25bc7e
SHA51226298e03d34f813fb88483c4bd52a26c94beded36018802973706afbcb22842b57bdbeb7b521003230689ffce53acb6ccc6ce5c783fd86195a4cd8ad09547c67
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.icoFilesize
70KB
MD5e5e3377341056643b0494b6842c0b544
SHA1d53fd8e256ec9d5cef8ef5387872e544a2df9108
SHA256e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25
SHA51283f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOGFilesize
279B
MD5993ec9afd5558d3d96debf57ec5d7f3b
SHA12b30672275b4bc1bf5cca72c1e4eb661bfcb0190
SHA25664f5c6547a025d0bb7d23a83afee84b074df7a4018bd436bf3bbc9853ec8c377
SHA512981faaec8a0fd572ea99cf38c7b1d2f36b8cd51568e50d9f30c368a9159ba7474dbac14cc80b4be60eaf119d58d5c86db0b9afba15a17a253e47f8e782b21070
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\FaviconsFilesize
20KB
MD5c8b17618f8a7cbd80e771e12537b5ae6
SHA16f6c6af1db69cb58cce53b957529064c91ee468d
SHA2564fc592dc0366ac7c2f5db945c121863e99fa975175c992bec8921de387fda850
SHA512df8018bb345d2c8148d37c5ed3d5b9c28a95339e380a6778e5803f3c1e0d063e285e0536c2ebf718a9064610afac3bb7b87479130b8914f58ca6404fb3bb05d3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1Filesize
264KB
MD5dd1dcbdde2cdd173569e2278fde34865
SHA1ded0e7466a5e6010568bd3d318b25a068adaca29
SHA256ceca867bfbcbd96fba9fb328cfed7341a78f58ed4fd73ffc0aa7a4813c9066f9
SHA51229e3e72832fed3ebe9d84781b980b71a443860aca3cfe9e4bdf86e8b47568adb067085627befcbb89e90f88f265a2e7d62f0b10b514a374a45753b48e444e412
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\indexFilesize
256KB
MD5fa8a35c93cd23346bbbfa2f678430da3
SHA10ca48896b2761f72bfcef50b2c7c8a4204b21efa
SHA2567b1c9797e2377aef94de50fb385a2e29b0aaa865bff2087db7f72cc923113422
SHA512c7b916ae013d73d12b797bccbd9238571e8210f44d9ad2a4a8de0a2a48b230488f55847e49ee948e4443155e157f9afeb8efb6bc1b34cc7f6452c6d0ddb7889a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HistoryFilesize
124KB
MD5c22b36eef50a945a9f90fb950db1ff26
SHA1f26ed5ab17db344129280c7109b976bcd0fc007e
SHA256bf48bd67b749bd25e606dde61a26c16fa1585aa401fc56be5847f1ef007ea5a9
SHA512b8ff4827e9101641073596877bc735b7cff58d454e135e5f947f51a7661855d5cd01bdae79a4625a2b4fff5f231306075a7364ee9d1a18db86f8cfe3e928006b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider CacheFilesize
1KB
MD54b9332819ff6480cb018f040c090ceaa
SHA18771354c82c72dd3207214e2b7a2406a30975c1f
SHA25667044a8aeeb25d8f1241f26f436191262acd2c32d17fd704acdbd3dad5b52891
SHA512eb4ea5ad5bda83c9498df087a5d82f383884945220ddf7f17cb4fb70bc743bab82b138166c1d6b66b636992196ce91a416bb7d03aa717be14b043366bc0e045c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.oldFilesize
394B
MD52cbaed5931b7cc2730bbf949b79d87ae
SHA18c66bee495f5750a229540a2960102a727851536
SHA25688f26d569221c1de2debcb52bb348d2c5fbd0498c78c892f81b0d17424128992
SHA5122fc77689b52ad289bafd815015b64ca7c3f7b0f25663aaf81ca767615c2d97f17a91dfe5d769f0adddf72a5e2bf1f15ab28b97a8ae16966447da88780d4a6003
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.oldFilesize
391B
MD542ec587278754263672158f3be1f9442
SHA10170a8b4f83d91534f1fde01d3be8e9c3399d9c7
SHA2568dbf4bf66c8e2ccde71fc389f4755d785973a19e015c34358f88e4493f09b32f
SHA51201b3f7155fe729b2659d55d39edd3c7dac21e3dbde4353a675507e99362ae1b1d45c3fe9959a5fc92cbad445a3149afc4c99018c6db29d49e111e563796810e6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old~RFe5ace7d.TMPFilesize
353B
MD5ecd4a59e3eeaf352740993a97df1ca71
SHA1d0c5fa04b1336bb1c345fcb09ebe75539475762c
SHA25645d346e5ef61481180ed816fc9189058a8a337a3bb7bc0d1728c9ad05a1194a4
SHA512eb1510e5bcde6fb7812f284910bf531f3019f42017b1028dbdb204fcc691f1f9173cbfb8c9906fe484dbc548078646b1ce9181e12b0bfd0a50576557fb800ce4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001Filesize
23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000004.logFilesize
1KB
MD5f35030b6b03f7e6b597678726072b945
SHA160e48ca9f88f9db5647b05e0e9a56bc3682bd7e5
SHA256dc43ff722fda74d792f02aa4db7b381ee4e9d35c6f7c15726e1fc2995adb148c
SHA5126ca27e359f27c55740f84fcb94eff701f374302098f1640eef7d4d16a494a1fbaf92272d6cb0b6f16844eb0d21ff92f89c692e16b07176db41a806addc4e8208
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000005.ldbFilesize
60KB
MD509c38dce1f1cccf63887d05918cbf26a
SHA12d54573c492ff12512b6c1620d5f1886973db3f3
SHA256f58c98dbd986f33bb028f32412aa0a0bdc209b203a89049b0d127756b19629e4
SHA512da804708fc10fde696f04698936f7253631b12e88fc4523dc394767d29de958d4f95ae0ab16e4684620f17868dc4dd6a60e061a2c0a2182a65b5f0b50cc3e03d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOGFilesize
491B
MD551e82c67a32ea3c8a150023b5e11cf6a
SHA1c6a17f80f48bbec46e01a4a19695d69dbdd79e90
SHA2562f880cc803cdfafc12a246d55db67fce51674a5c1d359bd1ed986edf03678de2
SHA5123a04d1a7f67dcd2a764ab48a50fa1defe4b473d08493b2d3545172984ea5948b539c99b9b8b64ce11222f6a1d18e9e85011ea16805956dd41e911d5cf2929332
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\MANIFEST-000001Filesize
153B
MD583a09e8de26363881f3371ede4f41b72
SHA13a92a2b75a31e55cde1df76f6e04181881319f2f
SHA2564ff53f209576e4524c9d86c60ec6df84ff63d675629ef54973688db00ada09be
SHA51297b1647166bad8b2c0011f8d635b3036718ff31d4333af46f69481b72ea2027016a0740fa88e3ad6524226f5e481ee0e0c219a30b20ea3c7297ac604bf715bcd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnkFilesize
2KB
MD52e35de053fe7e73d8eb8408e2699a192
SHA1102916d6d06ddf5701e76a5cae9215b90c576af6
SHA25606c1920e96a3fda0195a9e8b9ff3d3f2ee5c44b68e7d1f82e74c5e35850d19f1
SHA5125e55d0471311a87c86ac9ecad6d2ef78b370004b4d466c8772e64440293d5e5cc9ab8cf0de56f771fb5e48b9415beba2f27c47e17642b7b067e496996a5d8276
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD559ed533e4f70e2966109779d7a3e55fb
SHA1f206685a520f200616cb200bc7e898ef4bc9d2c9
SHA256c7b5b3c662d1266186b0a17f38f96624baf251631e6235745ac4eaa0adc83d04
SHA51292cc2c7a30b04eae0cd5f312bae3bdda1d872e6e3b0bbc3b13c1c2c15b9af82d0ef85990e711838f6b3f62e15b1e16d885e4c3779f3893971532d9cdee1d45bb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
14KB
MD525d0b5a222684b0cb58572a661c6439d
SHA14df8663a646ee6a203e8f8475ba5416ee1969bd4
SHA2566c27bec54084d0f404c719a41fe26ce92e28cb0816dbf99eb6f7116c60cb0412
SHA512de73ec7c79fec360f2010705dea9434ef7baceafd0ba00d07149ff6ac371c4d03f205fd0ce0d3395693fd4efeb8c6aa2f5dfb0bf6b2717986e07e778a1a63c7f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
10KB
MD5b61e074e350a0274168049552902f78a
SHA14bee98e89e56b7fdb006efb38283c03f1fba4b44
SHA25655e95dfae49a25a2476740bcc852c1645f8aa16cfab0468deab9de1fd42acc1c
SHA512f05881921aae5fa0677f4b2f92ef8c3187d599d607158169bec90ce8176acd8e5267b4c6c3ae50816fa3505075983f339f57448530469f25e71d696a811109ab
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
14KB
MD59d3a43fe55b8b3c669ca4a0619a02927
SHA18c2eba6ff053465f26326c90f5593b75989b8b2c
SHA256080f665eb13767036210f8a867ec7173cd023edcdca8e7a54178f192b76a0f18
SHA512c94656bd016962ea5e496b17aa99e2a8c9c6a0e9de596db20d0f3359d661a989fb7ef8a7044ed085b4ff27e608270b926994ca067b505335574e6be69a3a22e4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD51d7622769e022d1a6e2232be6d6d11e3
SHA15739e6bf6a4a0953bfa5d20c2352b6fbbcd7db1a
SHA256e70a7c06e732a035ca957247e07f8843b9f247fb3d7837eeea03e2b4bafdeaf0
SHA5121b3910dc16487e85d6729186c692040bda6eac12b9d685163e104e84cd258f978a7c6de8688e0b6999dfe63e3b6153578a22aaf344d9977caf45b6eb45f06185
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD5a33a41e31b4d13785e2aaf79f7947c43
SHA133b4125eb3980b4f61b8603cebe5d938f1e94e6d
SHA256f6fefde54f1ad966577efdb62aa24ea2effeb6decf1bcd84e8966e1205002f64
SHA5128b5386e8ac5394632b40e91d13cc90d7f7c4277e04284509d7bc1ed4764ed62c21a58dd0e114ae449b880a41976f4032bbd8d8f957177884d02adaafba1c95d4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD542578ae98893a3e6cc01f651a857206b
SHA16168716575d2b347995be832432ef93e4570a4b6
SHA256dc57b450bbe63a2a95f84fc4b3e9b19f62cdda0325775b813d3af6074c107203
SHA51260b06d1d49b5f3d9ce58a11dc2f8c575ffb53ee8635611343ef211f217bfb7a5a1567ed9b4726e8b911f701375cdf94ab7046462dc49766e0ea9056608b55445
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
4KB
MD57c47746afc89cc4d43d05b67f842b834
SHA1a3242e6e5034f5a27d51beda17e71181e3be420b
SHA256e9a0ed017bf9e08a18717adf7a3496f7c2ac798de3234b44cbb3873f008b5248
SHA51247f9b4b6bc4b78f65600e9efc85ca5b858ef4441f563626d4ec42e76b5ab5e403bcc78b5fb4beae50d50eacce033acc3f2cf20a8a3a5446d9fa954919593a816
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
5KB
MD519dc77c11dc1af75f141111afaa2c741
SHA169b6b16049e435c377ad7be9a0d1506feebe8e82
SHA256983e270b4d9dcf2311b628091bb813ae06f3b6af9d2502265f83c3aedee18cf7
SHA512b120a90824fe4123f84cc0577b3f770d093e20a4eee207d704004cfe2bc9e979112e14822602f609a8073bf8aa321cc1c6f53b3735f64b524b6d362a5943be6e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD52d670fb62796d0393652ee8dfb18c36f
SHA152f482b6c4be7e6b0e8684bc33973d6920c61148
SHA256b9cbd1a0032eb04ff6909dc1f42d955504bd27d413fb6c4797bb3ef3e4862604
SHA512bbcc16536b1046e09613402c7fed102e47c4cf8ac1e9540717d865a116361da4973a787b9e20f415ea988b338ae173ff0e9ce3e16f6414fbcb5774687382eca9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
7KB
MD52d7b7cda4b34c834fc98f2814d634186
SHA10b51687ad7b8ee456c8340ffba49c5a5a2f52164
SHA256488ae87c859308ef2eb830a6b3b1cfc200d0e3fb431bf4acdb3c745670ab221f
SHA512b37b3cbb5dbe09ffe8863b59c6e45ee8c85cde111016857a377c21d8db63d418e6f3aaee8ed2bfec8a6031b13b9e55fbcf678ee4d82a2a553e1fe00aff10f02c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
13KB
MD5130a41a89e75f6a8855e11965fd0ac10
SHA1af0a0cc86d05cfff03c288d4268b9dcdf1a16840
SHA256c110fc91bff7544a7c0c6df4b0fc29f8370859dc938d2debef44531c6c53201c
SHA5122b43e9e3572d0828ba64ae9b8668abd26beb8e3bebe6d9fb882428a6061ce7573371aa455cf98513f8b89bdaf544cdd6b831af1053186cad7866f44faab7455f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD5fde8e78bbf53c42d3fac44c326603c89
SHA1f1486e3a813594038ae7b2ae956e79e37e3e9fbe
SHA256a8061efaf1533ee5353e07b18a1f241b003d7bb578aa397c5d6ac40349989dd3
SHA51206e767bb3881ec0f4fafbfa26dd11836d0022f63720a3c261ce1f5e5bf286788b575065ff7a3cde707bec1dda8e512912417daf5cbdbab74be7fa8f5b00e2a71
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD545d57b5c9a9faaa59b4f2295a804fffd
SHA1d5fc90233db4991f59b5bc70ec9f4393d7300f79
SHA256cb5ebbcbee824704ce1041388449e17025d6673d786bdc6a7c8625ed0144f69b
SHA5120efc89c04364c7c1050f2e4999925b39e201c75c59f9f5d3065ab9361ddad2f12f8419b1af9c8d6245794d87714da12f1cd3196b87020a59b2a154780088a566
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD50b3348f1be251042da2ea1ed70f328e0
SHA1b553dd6caa0fb37b861c153cb295634bc1479bca
SHA256ad6378d1108332c38497a65dea815fbee3af907a06fc62d697ab6f97b1787321
SHA512468cf26ea000e81d370011b677a1d5bab77313442f541f7ef66c709c0c5d6893bdd483fad1461289dd1053bb20a773c09438c4bd4c100ace0f0d918382bd1a13
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD56b5e0cbb209b5e82415fd1ccafa4cdfd
SHA122d67c1631b1412165a5ae798ffd3cfdfa64c23f
SHA25652c739acec95a8e92fa9dc13c1fb7d5a23ff4b6d17a6d1589c7738aee62911c5
SHA512fced1101dd8f28f39b1728d2f284818c91fbeb3d1b012f0a6c21220f4838e253b9b756eb5ae21016ddc720eca57de3d60cd0922e665d0bac4c7bf80bf5585ab7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD5101c28f5fd8d5ee4a2f564213f222065
SHA1d0a7f4a2e4809d3fdfda6a208a7e89933ba297e4
SHA256a12a335e74cb3736db47a993efc5e6885d16f1d3e3df55941fa2ef1cf56227b0
SHA5129abe048b5c99a477a89a9708d9fd9a3c09f6bdf5fd2bdd5b3d0699406d378611a1f72b8291f46a3d66b30721f4133f28958186d55cfec91dd07a2d647fa45794
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD5cc131593812c0bee3622402dd6d0322b
SHA190137137eb3d7dd07441c32183898783b74993fc
SHA2561d6401bdc60dfc9ac786a72aa65512e3204c3edefb8ba96f6cd7bec2aa97310f
SHA512ebe81ecf2685a7a0cdb912f5eaccda112da9a2095c805075aa04a8528c05dd9856e573d16c73393ad1c06a43f2d65d7637eaa3de47173735663c9b27a5984da3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD5dcf86f17109a383d46e3c4c620aff84c
SHA1dc9dd2cabf2c5ed101f83fa9ca1a2b931d2a49da
SHA256e1c9040729710bc6942983fb07ca38caee705d1f0590568806c8b9bcea60b027
SHA512b8a25815eae28fac26905002cef124616606b089559ee124399f2bdf8005faa8c53f3be8d9a226be6eabaf65196f98f193653e7ec87ea94a5df54f944141652d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD581fcdb77ae8a5e3e1939dea746cbe21f
SHA1eae214049af6574b1eac32bcc2825c8d3ce9e757
SHA256d1bf0de2bb817b0bff54df68889e1a1f59019f3e5568c0ffc03a8d254eda2e40
SHA512767e0ce2bc0d6521125733854e1f4471c9d2686820a0ca368d80e37e191985fa5b69de682b96ec3e215d7ecdc6de110c81d0b31753fcb547df767b3601d7e272
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
16KB
MD5e5e8a6008e4611dfb2e81ab8337469fc
SHA1890cc219fda7b601d3b2e8f72d6d5873e61fdf3b
SHA25673f63c7b9d07db0ad5747735aafb71fba71af32d7bfc608c6a93f8d378c565b1
SHA512aaaab16d6ef4f8c4b70a0cf9413fb77b273436f1e441974d3c9bf561e739d997fbc2323e1b21dea7fb9673fc04ad415822063bda12481233931f5e8567b3e2ff
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD55304ae3decfd81bf04334ef1c988f910
SHA1f766b6506f1632e1b981b4d28eec30c3166999d5
SHA25616777c86d3ff4d4a0a04a8c4e9e1568f7dbeddba84f827f3e31d1200689ca7ff
SHA512b18c6a8fbaa19d18fd6285dde59676c73c0f9e1270657fb6e67e80afb80024870b84813abddae278db832f23e65992ec0c850256e655f826866c82d3b74504e6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD5165e32b5ae4bd3844d7a4e8633da068d
SHA127909b400d8e4636142148d3d5dbf78383e41111
SHA2569db1a22bd50facec752064642b0d13958686b9e2c13e1501ee83f4b59e0773e8
SHA5127691c0e985155830fc30f9aa6340340891d330ba9e19b2ce20beff46b84f092db12b11dd05ff4b49190e0ddbac23ec3999c59c3d00a06786e59683d067c86396
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD5165e32b5ae4bd3844d7a4e8633da068d
SHA127909b400d8e4636142148d3d5dbf78383e41111
SHA2569db1a22bd50facec752064642b0d13958686b9e2c13e1501ee83f4b59e0773e8
SHA5127691c0e985155830fc30f9aa6340340891d330ba9e19b2ce20beff46b84f092db12b11dd05ff4b49190e0ddbac23ec3999c59c3d00a06786e59683d067c86396
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
17KB
MD5b74e0e3c8911eea79226692c97b4a20f
SHA17659a3374983c41fa8b2aa22c9eff464a6116931
SHA256f3cb75b09d79dd2e5f6c6029e517c65594d5f30afc2b50672842111d75b0fd04
SHA512b8d29783ec848cd362841dad076ff097e7bb142dc504ed5da5108c86614c001b4801e851dcaca15d8d8731a727a86ca0555a13fd0927eb9bb6a96fe4a56946aa
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
7KB
MD5bc1d26f07c4eafd847edb5e1932629d8
SHA18f08c89d5d3f0f4975da28b79f45b0c2b2176af7
SHA256ec19445b4a0aaa7aff7e1d87a719d2a3e3675dbf7d1e49a16b2931155886955d
SHA512c4abe84227b62a040964e9b5114fa419bc870cf0f9b4e835ea99af1fb0fd70f3ac5988e5e2fdbc7203115facd80a44377e4451677c8aa9dc271aa33ca0e53e7c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure PreferencesFilesize
24KB
MD5d53ac35ab3976e67caeed75c4d44ffc1
SHA1c139ab66d75dc06f98ada34b5baf4d5693266176
SHA256647867c7236bcb78b7d585b476d82a101a077fac43c78dc59e612253fbf69437
SHA512391355c71734ded913239a6db10a3202087e756bccc8e29411108f21b3f2460d9a9c606619aadd785285be70eddcf61ef9519441cd387cd3823c1399a6967cc2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure PreferencesFilesize
24KB
MD58d7ee92369af9a61cce705c5a8b901a9
SHA18e58ab896d740ccc90d71d10474eae15c052a566
SHA256b4912d40980b666264a31ef06e7722d44881e8acf92df8a3338bf74519cf353b
SHA5120c0c12b521a3a5780a1428c3166c04ed028adb266c250dd80c4ff2cad62c97793f9f09c910d0cf2615d70cd99104f091429f57d25978ca7822560cc67ddeb423
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e768ff26-e9aa-4056-87d1-0cd65fe7ebac\indexFilesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
90B
MD58d7f7ad764e7dcb856d8515f3834f510
SHA1d57e4b629454d459f7e988419c78583329a42d88
SHA25667cb4157d0ed18e490922994b911db8d11a715f9319d2e9ec7a409e9259ff2aa
SHA51243e6fc328419581aa15e61c12591a41e836a23460b1729bd522e633bd5d60fa06018d5d33d3526b5a4fc65893a78a162733933378aa9afd1b36e3e3e4922e8a5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
26B
MD52892eee3e20e19a9ba77be6913508a54
SHA17c4ef82faa28393c739c517d706ac6919a8ffc49
SHA2564f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2
SHA512b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
90B
MD5903f76c64e4449403b81764cc2ed7c7f
SHA166342d623c4ef55fd6c423dd5b9545ba832ff768
SHA256e4f7626ddfaae8afebb7eb17e54edbec0a726b91e1fc7828f4a403c74364c5dc
SHA512f4e3fdc08b9db1e1893d75add3c1e8e10d8808a589f48242660653c210bb87464eff86319d08a33ec8d67950eb0ecb952df63c1ea141aa06226806336768dd08
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
90B
MD5d08bbd31de6222e6e22d3eb935adfdf3
SHA114d93fd38e1c79615848924b464ccf5852114f03
SHA2564e3a170b65f22a5ba0f38b735e5bda10aa4a9f8d83c87006736a112cecbaf1e4
SHA512a0f4c029aa07eaf413926fb36551684a4ec3755b33a35c6e4e3b19adea087bd3fee93a12728d54af6d0e8257a6840f4ad1d783a377b62eb7d58011275d54404b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
90B
MD584053ed9e5825a3401710862a0fe7ca7
SHA12163c68719ec6b7e2dbd3e91e7f277cd2bad4d95
SHA2567e329ccdf8925f001ef59fc47de5d9b1f863d11d0d8e1b943639906a91c47c6f
SHA512c1db92a422e138d7647bff340501baaab454dfba02de8cb55907363c0706f208a61cb71534a48d16ca65c74e4282103646113aa276e91be3bd7b4b004850474d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe572eff.TMPFilesize
90B
MD50da527cd9fcba13253705e116237ead3
SHA13dc3e5069669f5bdb1aa92ecdc325c1253815051
SHA256c38754cd76fe618a31167a230d9dfca4bf8c98c55d33d9e96085f11faeb0df96
SHA512f073c72ea0d28d75177d281513583d797196a494e8731485e0699c73263510a3e2e227044df4bd8132e3ab2180b269c8b42fc9d15dab2579219b2d607602aafc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.logFilesize
3KB
MD5aa0886e4b090cde9bd3ff2eaf68c9f70
SHA107db23eb1823c680204fc7013604369e10959e0d
SHA256dceaa231c3a78e341c573c4f26aaa0e86d9e8ad85f1405f2df11c4f826ae4b50
SHA5123d93c91885691ffd3558a3560ff80f1562e3519c3ff4efc796e36ec1e2b13f57dab1a8348ea24851812e6532136328b8b7fdb615fe6452625fac941e3c003426
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOGFilesize
279B
MD5e9a92891b80e2d175387e793268ac950
SHA1dc55fd8c801aa3c3f676119973afedd7a4044d84
SHA2567c52d7777b1724815c22cdeb271b65a977f05453566e8222e5ee5de9c20cc1f6
SHA512c3284e692c67f7838ee335a5612ba5c0dff4e0d8ca247389a41e8cb01a1e6b4c66b4b20fcf264e37da4997bc2fed24db7b16b66e67e892568da8b4e521ea3987
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13325335305971186Filesize
4KB
MD5fcf84d617f1f99e7c5693610901d8c58
SHA138372f7b9474bd997bf3b9cea248d5b5ce4a044f
SHA256720d1bc04b3bb2fff2bd3251c1a5ff4818aadc15b05d74fcb7cc3d9268031ec9
SHA512e9488938feb02b5627033c22c64eeded1429a11ded785cdc4c2c28202a31749958e0e69ee0f47e28ad4efb85f05cf125bd579884c82163394798c74daa41517a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.logFilesize
112B
MD552ce685cb0e3e18b1c8b6356cb19bf89
SHA14c62d33b94a2f0f37c267d0472bf7deaded54d86
SHA256675f78a909714a227937d6e37770379499d26d03f88b07b5a9a498c50be2f576
SHA5123415c0911ee371ddfddf4af87b161590d0a17e15a954aa6b8c27b255d21a3cd00e87719ca89afab876d647c638e2602a6cd5e005fc21b97836208a3ba9a32624
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOGFilesize
350B
MD59430986a5b559f0c306ccfb9171fad79
SHA1c8fc072211b425d5aff07c97797d7736a7efa61f
SHA256a6c1cfe8ddcbf013a85926b57d398751b2973888ea908712595e548beb67a442
SHA51230c2ddb8c55513af9d6f948589bf5910970398a0507e88a03880915cb3678e59713020dd3626be160e8ff41e11c0653bcf8fdc1795a026c646583b1c8ce1fa15
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOGFilesize
326B
MD50c0c83e93be2e9980d82b0f90d04b92d
SHA179ac287a056433813ae553bca2758dfddd0e8bda
SHA256d498013645c348c0f83f4dac9357ed15bd60827290669f61890b828c81e2a2bd
SHA512c1573fa552acb1895e6dacf07fd3bd885e2af64688181404bf56e33e59f434e4c929997f68e52c93366bde5e5099503e14001b4c3b797b6c07ddc1ca0b147e97
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top SitesFilesize
20KB
MD5f44dc73f9788d3313e3e25140002587c
SHA15aec4edc356bc673cba64ff31148b934a41d44c4
SHA2562002c1e5693dd638d840bb9fb04d765482d06ba3106623ce90f6e8e42067a983
SHA512e556e3c32c0bc142b08e5c479bf31b6101c9200896dd7fcd74fdd39b2daeac8f6dc9ba4f09f3c6715998015af7317211082d9c811e5f9e32493c9ecd888875d7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
370B
MD534e36bc8bbaa99a5a83e9c11b35a1a31
SHA155b109ae6eb7d7dbc4ca6dadedd37431bb69b50d
SHA25657f8b5678710d8878ccc3e8835517d72e25f0da8068bc65e04cfd3b955c306f0
SHA512245836ae18570fe7f8c2b00aa8fcf2e9f32a384ff5b1207a73ec69ad1989e205dcebfa5a3a9a70808902b72a00d217262a21dd214b4e289346d3b75d94c11142
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
4KB
MD57af2fa758b84b11d3d1b4c32adb63ee9
SHA1ea02af739eb07e53c6b57e179fa2582bd3645b25
SHA25685f65a7568669eeaf6aa4a8972c87f1d5c511cda251dc6e42c8fb5c43f13cd41
SHA512f6b245eb1b824ba1c10ebc67a9ecffdea768fbef51d3e26d61fa44ad2fd9b21e280398d0d64d865ec67b8bc4a9a655941197063829fa642f51ce0d21aacfdf8d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
5KB
MD556d552e488c09c6786174bd1c543a2d9
SHA153d906a704d731fcc844ae194ea1a3b3c86caf94
SHA25636cc8a9032bf3cecccabb29a4092677a3f7a13ac34dcabee8924cfdbb257481c
SHA5125ddacf861cbccb65ef44f9a6ba66174c5c2e7729b092539e0278658b079fdc607ba9a12279b6e151fa9a2c38fb1fe8b7d5cfaf6b319eff1b7c7b5ef11a801ad4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
6KB
MD51f30e6a5a721b33597ffb66165f30c51
SHA13586d35887ec7f02a5d99c24d355d900dfce0a51
SHA25655a1413b65c10c0c9af37ab66c28ab3e3fcfb657ff11d327e23ec440a98e85f6
SHA512e4084b44b531d9e127fc1631d9155799f10bac6bec933bdf651ae7d18fff2313469c287a97d36e7188daf34fdc21a4790d571784ec6b843392d80ab853bc0e0e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
6KB
MD5bc8741d7f828c89a045741d526536d9f
SHA19453331fc726a126709ea6b085e171703faf2cbc
SHA256f58db996da25fdf33bb7fb9ea316d053bc4f3cd4719c16889b71a43fef67d66c
SHA51283cda92eab14c13e32a5b73f0bac8e1b7854157434acd7bb6ac5c99d8b6e05f11ca342208897fb66d924596b194b7dcb35d56829772e5650c875fbaa236c890a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
6KB
MD5cb45cfafad9e16499e6be052afecc2b6
SHA19b85b13c55066e20e1c2b0b3699488112446b690
SHA256524f3aeb12b642b2b9854cf038b18f3bd916849e90d35b0bd7eb3e4dff571971
SHA512597ebfe34bc648c120d7001f4cc768c9309472b1bd284b0978a55b3d1e75632578eda326939a2c933d6e2ed2d88a9ba2190e1db793cd32390b2679fcf98ab5cb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
372B
MD51def92a260b84a8e6c407169efa4d287
SHA1c06aee4e07b2446ce330b9851195e63b730fa3a0
SHA256d83598de1a60e859034c4410f452ceb59952c48a00b882d158ab0c1408e53011
SHA512ab497b129c6cc5aeba191ceb8199b94af4acaf1af6d23d53d37010abc75a248354503dac70dc8914b80448169f2fa87fd6c620a87c5e73f1b5b563bc07df7c40
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
372B
MD52224314690c54a45e5e8c800b2e50ab5
SHA1ef7a78848497f38c208fbd19bace35f7c69b827f
SHA256a8a457d4d5887a0a0020d7e8f0cd21ae6e536a418239014eb943d5fc6653a225
SHA51296b821669f857fae9fffa943fbf66daf8400572e1b24189eb1486c21c67d4b88e472fca6f1ff6394cda7e972d559bad49c10c52519a08e6f851bfd84fabd9270
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
6KB
MD555090fc347088f17ae2da0d763664f16
SHA1dae5c26976ca48030e57767f4ec26f381a037db2
SHA256f4c81b87af8bf179ee87611795690ec2a7364b84088c5f230ffa1df3814f9a06
SHA512700fca9d0735bb2b4b362f8a51050956f97be5ba304bcc01b33eadaf32196289692fb48cbdfdbb194ad536df31614c0131857247ae701190af5ac19ac543fa2b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
6KB
MD56e8940790ce3df4bfda155a0af4c2ab4
SHA1dd84f39c98a529f02f2254667573b481beba6035
SHA256427e427f2bcd8d61a2e4c2a9f858cb13ea84f83e11ad7c0f034c3e05c2a68696
SHA51219176a4e6fc850d1cdfea5ac12e9b7650ca36ec550c69d587f0839f055c1560daf051989edfedc68210e769d19c372441e3c1a907e8fed79ebdd3bf44b8c3aae
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579d78.TMPFilesize
370B
MD5576c22252da14c62188053fcb931dfa0
SHA10238dc44e4665c13831a0a8790f9d998667887bb
SHA2569a2b3092c8f7379b1922ac1af79eda48bf9d8cdd88b91d2a9b4b13904677339d
SHA5124d021e0304ea9e90ef8c4891236602f74abe0d2efb0c40d1a46c215827fa5b6cffb7b026768bf8495c78274651e150b15eb9411c4172b6990a10b16b9c17b6cc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited LinksFilesize
128KB
MD532257d2c7358b4e452036ef8920968be
SHA11234522f42be8c31b807170aeddeca8656cca451
SHA256d97899fbc73d4e01c2f64c2e587c12747b1450193e6cf80853812f1715f7cb97
SHA5122c093f0bd5be3d6eea409fda08109456d468d45592bb53796dff05021987b8ebc53e82d8a4a30d271fc40b946da37033420249c8a1688872f50c49f8897f4ce0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web DataFilesize
116KB
MD5f70aa3fa04f0536280f872ad17973c3d
SHA150a7b889329a92de1b272d0ecf5fce87395d3123
SHA2568d782aa65de6db3538a14da82216e96d5e0a3c60496726e3541a8165bccc65f8
SHA51230675c5c610d9aa32a4c4a4d9c3af7570823cd197f8d2a709222c78e2cd15304bbed80e233e3674ec2f6e33d1961c67fd6a46dc8ba8b1a301cd0722932c03c84
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a91d48dd-104b-449d-9f6c-59b9ac4d83d0.tmpFilesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.dbFilesize
52KB
MD539f0e8b32b7cfa2c412f284f40a420a5
SHA13a4ee9c705a0c61b361aff6a8ea28fc87d4fd375
SHA256ad0b4b09b98d452f35b38ecf0383e01cbf634f1788f2cfdcc38ddb77f769f286
SHA51259f00591645ba68da0134ee4aa7d909dcfe99fc57300321d8e3d0bb7740939b5faed60deeba270f9d2df6e52c7761ef868e4c01302a1198cbb971ea82147e9e9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.logFilesize
187B
MD5848e348209562cc84c8064ee2b5998d7
SHA106f1f806feea6109bde4de892c4118d729e6bc31
SHA256b40ac9e7846cf6e7b0cb9b9fbd7056733e5c4974a42d252ab317dfe8d5de3f15
SHA512a2e20fd9a519a7f4d9f399da1909e7fd3324178d6bf0c87fec753cb7a3870f1e9741bd6cf20d46ba643a59459451b43f18540a12b725c1ed69a41916d530120f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOGFilesize
279B
MD58dc0b16237aa2b1488961d0941674ce1
SHA123cad823988e028888443e16ac9dcc8e9ece2dd2
SHA256a62cb7d50e83bc06a80c80a11f3deeaa9453292ea13775fd244bebffdb47574e
SHA5127e10fc98da01db559cfc2f08fd9ade9849a4e59151b45c6bdd40d903a79cf71e8a6ca3b4b6c9d4c60b2df6f123cdf8449f76b39e3b59e8a6b2c6e33bfe8edfc4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.logFilesize
531B
MD57d59680330ff82df764b569974434d29
SHA176584124e881292daf2b7e56902b7800462dea94
SHA25630948b547dc3ba1e4d0955d2ae2409e7ef38268e1c9b33ccfff1b8c654433ea4
SHA5120656ce9cbc3f8ade601bf53a4988a7fdc1168ba2fb19086e4dcdd89b604efe949a239daac6a0b8cda97d07f94d43037a9848ddfedbf9eca65470097170ead75b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOGFilesize
297B
MD5b90e64049921738cda763cd45c864cfb
SHA150b57209cceafe89ef741aacc7916d4c6a6ab668
SHA256e35a84db921bd4b1c32842935991512ff4b695263c1c11f6ccc7f5bf72003e4e
SHA512adfb9abf2661ccd250477ec82a9ed65c0e0448c8f0b493f41d99f6948b9769ee5e4203753bc2156d4c3eeb268ca82dca4c355fb24a82519ee4f77ef6b58d206d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1Filesize
264KB
MD575a05315905b36765919f3fd512d7fc9
SHA1a0566d933419f642d10939551a4c3dcd393f3516
SHA256e928a07da5bcb2f9d04cf6d25c9bc1ec696f6f0b4cf4d7bd805804f84e012a0f
SHA51209721986c380348385dd327c4b11f78e6912d43d28d82059c0eae0a430facb575b9caca4b91fca381bdaaf8ad4d442d15a78febc27f9008f2c30294f1d1d5735
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last VersionFilesize
11B
MD5838a7b32aefb618130392bc7d006aa2e
SHA15159e0f18c9e68f0e75e2239875aa994847b8290
SHA256ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa
SHA5129e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
12KB
MD51069801d046422a90f8115c70165f3c7
SHA1e33977ea6d10d22283967b501d9491a5a5ebc7e3
SHA2563fa98086257362c9eb066f305360f44114118d332b2166f290e45260cc3a7c5d
SHA5122b49cc4586d5adc5f2eac019e0bf0f93ee0c17ed61b3a419de02ed4cf3dd6e5f94bfcc226e2a9dca89fb8d543b16b7dcac88d57272bc163746d80fcf6e068104
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5466074e61c4c252f249ec265d66c7613
SHA19e5cdb5d9d4878c182754df11c02e32ae2d1b7d9
SHA256b862c893ff3a06911c1fd3eba5177aeef349c86ca65005dcbac42e8e3a57b8ee
SHA512cc7f266076a11546a8205b1bc6de38559e62c84c291a2b24d5bb097f6633476909590175aa7bb155d8a0f43604f6c95a5301b424487ef768b7b787e26c5f00c1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5cc2d0954209579be8574ee1785b69a90
SHA1d8878691327ce80c5171a942ced8dc1257574a99
SHA2560ab311f7fd575a3524676c0a7fbaa4d0db1682a4b2e1d61f1536dcb7473f692a
SHA5128a03a3ca846f189cbbd2f504726ef6362082644cf95d8c38caad41701a4ca9b5ecd644e4a09c1a0ad503027564f969c2cf79c62fc19daf1c1ed406dc864192f9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
9KB
MD51882c0bd15a398f9f400ec9a996d3588
SHA1293b1dc341e427cd2aac8c71bb400d2bbdd46292
SHA2564033883174d88e77cdaff11fd86cf5ab3531e6ad93f2650eb9326531de110add
SHA512e603c8ee2620420d3aaedc139e5de9f53f063456fc64153fda553cfc44b181e247cec3cbb7decbf966e1e8f86fb886be29d3a963b04fb498c11cd089f4ad207a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
12KB
MD54f2bb1cbff195b632cc1b14b761c96b1
SHA183612b388344f0acc100c24bc24a4c2fb676e55a
SHA25623d5b2795c2e410cf97a85b6c9af2ed89fe4bddd7ee9229f3ec9372884c9a5bf
SHA5127e5be3705609e7c2896deeecfbaaad048fb834a5843c05db5245f3eea9c9402515e3cccd9ec115b4ab39608fdfc84894b2055d8a4897d6f6495ed3df85d2ea2a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
12KB
MD51069801d046422a90f8115c70165f3c7
SHA1e33977ea6d10d22283967b501d9491a5a5ebc7e3
SHA2563fa98086257362c9eb066f305360f44114118d332b2166f290e45260cc3a7c5d
SHA5122b49cc4586d5adc5f2eac019e0bf0f93ee0c17ed61b3a419de02ed4cf3dd6e5f94bfcc226e2a9dca89fb8d543b16b7dcac88d57272bc163746d80fcf6e068104
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5c8c9e02f13ad2acdf87c8e8a8b50f18a
SHA1a0ce2c768be256c6c618f8b75ea21b9bf058c359
SHA256b6f42f0e198e5c9a4116f31eed41bf20a1d2acaf88cedee1ebcbc9d318026729
SHA51230bdcbd8715f9b0cff7b948b50023605ff6abc3f573286d528f589752e49183ebb33ccd3e14f6cf2d344e8e5401674e7727df016080a9c2f273f6f83f1ac762a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5430869db94cd01cf5306d390d2db9975
SHA1f8c33f0b318d51a8b8b5e697015bfd1acab1eff0
SHA2560714c6286f025ae98b2cf374fa36ec45ef1d8334710e09cad20f2c90a7957921
SHA512ef39271c0010da4d6a4daa9e32f73d5be6f9aa750f21fce0bbc3d8aeba28a8f716ff3cec1d386ec4dd652aa8e6b0cd0966ddff3b390aab52535f0b53e2639482
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD58a4c1153274ff1d6a3cf044f5af728f7
SHA1cc8e7fadfdd7609447e69a636172d65e4a544623
SHA2565024dcfae76fb7c9416d0343356e84c80a1af7a5d940309ecfef84f90397a25d
SHA512f687ecf7af1d7a3fa5f897f38cf6823cfaa780641c54dd64430686c6c871fc3e6c184b920076ccae85441506bd6c904df6905e7d556da9d370152d08f938e915
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD560f8e4e34bb8d8a53aca9b77d6326dc1
SHA1df15cce7307c929cf0b35f48bae5064f4760500d
SHA2569e72a94ee20818b4bc5ec42c83ce370a925467cb730afe448b0e8ece561aecaa
SHA512ccea5580716bd0729fd55887b32310239ce8600f73edcae53c4c76d9c722cf57347740b37211414ad27e44a254290cfce04a8c1a93e8d7d47b08daa07e3f4acd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD58c79a4956cca2c4d9e6d45134f8e8912
SHA151e557e9f06d976291fb2f389041149191f56211
SHA256356275e71ad7c3e8e2baaf29031043fe3b53d1a62d3031faba7ef3f3156a0f1c
SHA512b86ea60bf71955a4976e10af281bb977885e1bc877e76349e092b4a43492a0cdbec4270a410140181bd0baf9b9035edf91d4b20dfa7925535cd8e11488399e46
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD53a7fd76a3ded2ae06682e18da4de8689
SHA1c4ffa4240a14ac2b67850f8057ef7c06a3e29630
SHA25608af835b06e459d7fd2e8cd3437cf1583475bb6d2160c4253d2276bf5e31ea12
SHA51276ffd1a1ea91151f4265513471acbe9c8a9f3d1de2d6f1292919d42d62e57fca96d0156a0d4d368f208dad56885d88af7d7aa5225b74c1bd4f28d6c0b073d568
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5bae51e5b76b90792da05ca3539f34f30
SHA1a0bf087702d23b444af0e178e3deff03fba308f2
SHA2566d2ae5dafe9cd59de56db5c4b437475ac7e5a760476dcc7b8cffffe79aaec929
SHA5123591a9b892face911c2bb28618b241a16a36d4c2fe27f1f4923c43fafa36a44988cc5b6cdf0b12f6e7a603ec503ce6a7d2f8e33d16a788eb2ff738917ade373e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD5e2c449f3bb7fa14c5c5d8fd795be3e54
SHA14b3fa1b92549081bf3db348da7dae50e5d96e4b1
SHA256443de22a0e4d6ff37260c2af86dac9536f66f653c049801066aee4d6424b994e
SHA5120dc31409c53d4f9360590a02a9581ccc9233e64206443dc0a8ca5a635a45cf0976e8d7a4d4a3677b47121e076e59e2f6d831073e0851f28931fb2dd3b94b4ac2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD57bae8850b342f6c08365c99a7ced8df5
SHA191b64b1b1d67067bfb4124a2076ed5bb846a5dd8
SHA256d9c2aa171614902023edf47d23786219dd1774149755329ed9ae7b819890b013
SHA512ab9c739d24fc7af775a0a6ffef48042b5b567435a170698827033a22a4e5fb8ca8400efe7ee947f9e3467900c3f757f39f967efbb1de1ba3c9bb64fb456b2e1d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1Filesize
264KB
MD54cf04741fdbacc025ac8570fe4564ead
SHA109ded4febc45a8754e09b5e569e0fec7854d1351
SHA25615bb80d6ff762983243b490508cf3cbb06a11301489ef365fd2d3f0e8229189c
SHA51294361001f6ecfc20a808974ac873372c451ef0bac557054e3cf0a39890d9c78a7fd1170e52bf80ba36f8330fffcc7b6410c1876585cfad6d7baceb3ef1b7fcb5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1Filesize
264KB
MD54cf04741fdbacc025ac8570fe4564ead
SHA109ded4febc45a8754e09b5e569e0fec7854d1351
SHA25615bb80d6ff762983243b490508cf3cbb06a11301489ef365fd2d3f0e8229189c
SHA51294361001f6ecfc20a808974ac873372c451ef0bac557054e3cf0a39890d9c78a7fd1170e52bf80ba36f8330fffcc7b6410c1876585cfad6d7baceb3ef1b7fcb5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1792115-ecf0-4240-8b40-01aaa4a341b4.tmpFilesize
13KB
MD5f74611f200161a3e9d07c5c039b50dc3
SHA118581dd4b1d26351c20c6285dd7e5e024fb88bce
SHA256f5d27337cb7b5cbb247268f9bf91b4dbf2b3473ca638b42e06edf2c772d47c35
SHA5123080cd627542e985c13f696d1717bc26f6ee3647e7c5461b1eae306a4a01fa3156508dd949290ef6e9335c6de45c01e68a3412fd52a4834f2e3f2a6c4257dfdc
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-msFilesize
3KB
MD5806df17c88ef4391a46d2c0cce89d9a9
SHA183f736aaec33a4dda40d041da1ef797c4c2154f3
SHA25694a0f3ca9afe331ec5d6a2bdaa52cd33ac19bf6f467bfd619a64eb8d8686dc3e
SHA5121ec5e142402a76bfe732b962a744c9bf32ef83066c547c4bd16bfbf3b0b6c4d3f85dd934fb8f9fb3c2ad40986b5ba0a1751942d2656652603151a80eb1fc7a3e
-
C:\note.txtFilesize
218B
MD5afa6955439b8d516721231029fb9ca1b
SHA1087a043cc123c0c0df2ffadcf8e71e3ac86bbae9
SHA2568e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
SHA5125da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf
-
\??\pipe\LOCAL\crashpad_5044_LVGLFTVXCBDYICJCMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
\??\pipe\LOCAL\crashpad_5840_LGKDPCBXHVMYXAVRMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
memory/908-1891-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1896-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1890-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1897-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1901-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1902-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1898-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1892-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1899-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB
-
memory/908-1900-0x00000000059E0000-0x00000000059E1000-memory.dmpFilesize
4KB