a9cd3d966d453afd424d9ac54df414b80073bb51d249f4089185976fb316e254

Analysis

max time kernel
451s
max time network
461s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
07-04-2023 08:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MEMZ 3.0/MEMZ.exe
Size

12KB
MD5

a7bcf7ea8e9f3f36ebfb85b823e39d91
SHA1

761168201520c199dba68add3a607922d8d4a86e
SHA256

3ff64f10603f0330fa2386ff99471ca789391ace969bd0ec1c1b8ce1b4a6db42
SHA512

89923b669d31e590189fd06619bf27e47c5a47e82be6ae71fdb1b9b3b30b06fb7ca8ffed6d5c41ac410a367f2eb07589291e95a2644877d6bffd52775a5b1523
SSDEEP

192:HMDLTxWDf/pl3cIEiwqZKBktLe3P+qf2jhP6B5b2yL3:H4IDH3cIqqvUWq+jhyT2yL

Score

7^/10

bootkit persistence

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

MEMZ.exeMEMZ.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation	MEMZ.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation	MEMZ.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

MEMZ.exe

description ioc process

File opened for modification \??\PhysicalDrive0 MEMZ.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	MEMZ.exe

Drops file in Program Files directory 2 IoCs

Processes:

setup.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\d6dcb550-2e5b-4e72-a92d-9c71adfd66bc.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230407100121.pma	setup.exe

Drops file in Windows directory 1 IoCs

Processes:

mspaint.exe

description ioc process

File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

description	ioc	process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

Taskmgr.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	Taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	Taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	Taskmgr.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exemsedge.exemsedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

Processes:

msedge.exe

description ioc process

Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ msedge.exe
Runs regedit.exe 1 IoCs

Processes:

regedit.exe

pid process

4724 regedit.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

pid	process
4724	regedit.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

MEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exe

pid	process
4388	MEMZ.exe
4388	MEMZ.exe
4348	MEMZ.exe
3940	MEMZ.exe
4348	MEMZ.exe
3940	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4388	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
4348	MEMZ.exe
4348	MEMZ.exe
3940	MEMZ.exe
3940	MEMZ.exe
4348	MEMZ.exe
4348	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4388	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
3940	MEMZ.exe
3940	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4348	MEMZ.exe
4348	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4388	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
3940	MEMZ.exe
3940	MEMZ.exe
4388	MEMZ.exe
4388	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4348	MEMZ.exe
4348	MEMZ.exe
3940	MEMZ.exe
3940	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
4348	MEMZ.exe
4348	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4388	MEMZ.exe
4388	MEMZ.exe
3940	MEMZ.exe
3940	MEMZ.exe
3808	MEMZ.exe
3808	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

mmc.exeregedit.exe

pid process

5632 mmc.exe
4724 regedit.exe

pid	process
5632	mmc.exe
4724	regedit.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

msedge.exemsedge.exemsedge.exe

pid	process
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5840	msedge.exe
5840	msedge.exe
5840	msedge.exe
5840	msedge.exe
5840	msedge.exe
5840	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

Processes:

AUDIODG.EXEmmc.exeTaskmgr.exe

description	pid	process
Token: 33	4932	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4932	AUDIODG.EXE
Token: 33	5632	mmc.exe
Token: SeIncBasePriorityPrivilege	5632	mmc.exe
Token: 33	5632	mmc.exe
Token: SeIncBasePriorityPrivilege	5632	mmc.exe
Token: 33	5632	mmc.exe
Token: SeIncBasePriorityPrivilege	5632	mmc.exe
Token: SeDebugPrivilege	908	Taskmgr.exe
Token: SeSystemProfilePrivilege	908	Taskmgr.exe
Token: SeCreateGlobalPrivilege	908	Taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

msedge.exemsedge.exemsedge.exeTaskmgr.exe

pid	process
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5840	msedge.exe
5840	msedge.exe
3484	msedge.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

Taskmgr.exe

pid	process
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe
908	Taskmgr.exe

Suspicious use of SetWindowsHookEx 21 IoCs

Processes:

MEMZ.exemmc.exemmc.exemspaint.exe

pid	process
2868	MEMZ.exe
2868	MEMZ.exe
5412	mmc.exe
5632	mmc.exe
5632	mmc.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
2868	MEMZ.exe
5716	mspaint.exe
5716	mspaint.exe
5716	mspaint.exe
5716	mspaint.exe
2868	MEMZ.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

MEMZ.exeMEMZ.exemsedge.exe

description	pid	process	target process
PID 1364 wrote to memory of 4388	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4388	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4388	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3940	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3940	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3940	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4348	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4348	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4348	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3808	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3808	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 3808	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4560	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4560	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 4560	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 2868	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 2868	1364	MEMZ.exe	MEMZ.exe
PID 1364 wrote to memory of 2868	1364	MEMZ.exe	MEMZ.exe
PID 2868 wrote to memory of 3152	2868	MEMZ.exe	notepad.exe
PID 2868 wrote to memory of 3152	2868	MEMZ.exe	notepad.exe
PID 2868 wrote to memory of 3152	2868	MEMZ.exe	notepad.exe
PID 2868 wrote to memory of 5044	2868	MEMZ.exe	msedge.exe
PID 2868 wrote to memory of 5044	2868	MEMZ.exe	msedge.exe
PID 5044 wrote to memory of 4012	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 4012	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe
PID 5044 wrote to memory of 3692	5044	msedge.exe	msedge.exe

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:1364

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4388

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3940

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4348

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3808

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4560

C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\MEMZ 3.0\MEMZ.exe" /main
2⤵
- Checks computer location settings
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2868

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe" \note.txt
3⤵
PID:3152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+get+money
3⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:4012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
4⤵
PID:3692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
4⤵
PID:1744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
4⤵
PID:4756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
4⤵
PID:4684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3684 /prefetch:1
4⤵
PID:1412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
4⤵
PID:3648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:1
4⤵
PID:4276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
4⤵
PID:3844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
4⤵
PID:836

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:8
4⤵
PID:1916

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
4⤵
- Drops file in Program Files directory
PID:4788

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff7d28b5460,0x7ff7d28b5470,0x7ff7d28b5480
5⤵
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:8
4⤵
PID:2144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
4⤵
PID:4148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
4⤵
PID:4152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
4⤵
PID:3688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,1614632058438740898,17575342018645843597,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
4⤵
PID:3868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=virus+builder+legit+free+download
3⤵
PID:4108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:2544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+remove+memz+trojan+virus
3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:3484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:4844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 /prefetch:3
4⤵
PID:6076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
4⤵
PID:5944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
4⤵
PID:2760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
4⤵
PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
4⤵
PID:3632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
4⤵
PID:2496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3600 /prefetch:1
4⤵
PID:5444

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5308 /prefetch:8
4⤵
PID:5668

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5308 /prefetch:8
4⤵
PID:5684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
4⤵
PID:844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
4⤵
PID:4448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
4⤵
PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3700 /prefetch:1
4⤵
PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
4⤵
PID:5992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
4⤵
PID:6008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2172 /prefetch:1
4⤵
PID:3528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2956 /prefetch:1
4⤵
PID:4996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:1
4⤵
PID:6132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
4⤵
PID:4620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3636 /prefetch:1
4⤵
PID:2256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1
4⤵
PID:2216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1
4⤵
PID:5864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1
4⤵
PID:5176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3644 /prefetch:1
4⤵
PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1
4⤵
PID:5444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7352 /prefetch:1
4⤵
PID:836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1
4⤵
PID:4004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7360 /prefetch:1
4⤵
PID:4656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
4⤵
PID:4660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:1
4⤵
PID:5420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:1
4⤵
PID:5696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7088 /prefetch:2
4⤵
PID:5276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
4⤵
PID:4708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8316 /prefetch:1
4⤵
PID:324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1
4⤵
PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8052 /prefetch:1
4⤵
PID:2828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8564 /prefetch:1
4⤵
PID:4296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8440 /prefetch:1
4⤵
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2208 /prefetch:1
4⤵
PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8556 /prefetch:1
4⤵
PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:1
4⤵
PID:1836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8736 /prefetch:1
4⤵
PID:5056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1
4⤵
PID:3476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1
4⤵
PID:2924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9120 /prefetch:1
4⤵
PID:3772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1332 /prefetch:1
4⤵
PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9168 /prefetch:1
4⤵
PID:5216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:1
4⤵
PID:1380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9464 /prefetch:1
4⤵
PID:2012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9236 /prefetch:1
4⤵
PID:1000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9244 /prefetch:1
4⤵
PID:924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9720 /prefetch:1
4⤵
PID:6764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9508 /prefetch:1
4⤵
PID:6864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9992 /prefetch:1
4⤵
PID:7024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10044 /prefetch:1
4⤵
PID:6472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6291026579769363129,13122910068733012990,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9268 /prefetch:1
4⤵
PID:6944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
3⤵
PID:4424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:5164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:5748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:5732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:1852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0xf4,0x130,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
3⤵
PID:5616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:1056

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\System32\mmc.exe"
3⤵
- Suspicious use of SetWindowsHookEx
PID:5412

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe"
4⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+2+remove+a+virus
3⤵
PID:3776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:1944

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe"
3⤵
PID:4752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:2148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:4180

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe"
3⤵
PID:116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
3⤵
PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf4,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
3⤵
PID:4908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:1052

C:\Windows\SysWOW64\regedit.exe
"C:\Windows\System32\regedit.exe"
3⤵
- Runs regedit.exe
- Suspicious behavior: GetForegroundWindowSpam
PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
3⤵
PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:4176

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
3⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=batch+virus+download
3⤵
PID:2096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:3492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=virus+builder+legit+free+download
3⤵
PID:520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
3⤵
PID:1304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:3028

C:\Windows\SysWOW64\mspaint.exe
"C:\Windows\System32\mspaint.exe"
3⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:5716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:6688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
4⤵
PID:6704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\MeasureWrite.mht
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:5840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff92b4d46f8,0x7ff92b4d4708,0x7ff92b4d4718
2⤵
PID:5852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
2⤵
PID:6104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
2⤵
PID:6096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2960 /prefetch:8
2⤵
PID:5152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
2⤵
PID:3376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
2⤵
PID:3424

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 /prefetch:8
2⤵
PID:5348

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 /prefetch:8
2⤵
PID:5412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
2⤵
PID:5452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
2⤵
PID:5424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
2⤵
PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10972633299701233332,14315066261936543061,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
2⤵
PID:5616

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5232

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2656

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x518 0x4b4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1384

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:5392

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Peripheral Device Discovery

T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
0820611471c1bb55fa7be7430c7c6329

SHA1
5ce7a9712722684223aced2522764c1e3a43fbb9

SHA256
f00d04749a374843bd118b41f669f8b0a20d76526c34b554c3ccac5ebd2f4f75

SHA512
77ea022b4265f3962f5e07a0a790f428c885da0cc11be0975285ce0eee4a2eec0a7cda9ea8f366dc2a946679b5dd927c5f94b527de6515856b68b8d08e435148

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
425e83cc5a7b1f8edfbec7d986058b01

SHA1
432a90a25e714c618ff30631d9fdbe3606b0d0df

SHA256
060a2e5f65b8f3b79a8d4a0c54b877cfe032f558beb0888d6f810aaeef8579bd

SHA512
4bf074de60e7849ade26119ef778fe67ea47691efff45f3d5e0b25de2d06fcc6f95a2cfcdbed85759a5c078bb371fe57de725babda2f44290b4dc42d7b6001af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
163202a097983b20ce2bc01b538ac220

SHA1
d6687b7a0da5b733e677f7f9bc909527e97ff748

SHA256
031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e

SHA512
dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
163202a097983b20ce2bc01b538ac220

SHA1
d6687b7a0da5b733e677f7f9bc909527e97ff748

SHA256
031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e

SHA512
dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
163202a097983b20ce2bc01b538ac220

SHA1
d6687b7a0da5b733e677f7f9bc909527e97ff748

SHA256
031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e

SHA512
dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
163202a097983b20ce2bc01b538ac220

SHA1
d6687b7a0da5b733e677f7f9bc909527e97ff748

SHA256
031eb7b5db01a3ac72cce6caa1b26a3abd390d0bb06ae09af624088979c9330e

SHA512
dd1323e23848cfc3bc9d025e856bb2e48c94dac3093110356ca9c1fdac2ebd5ea304d0c79424197e6153126d29189c07a2993ce03873392023aaa967e5345a13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
9f59d0c802ed3f10fa0410a93edead97

SHA1
4e965b1e401ed9474d7ed7c756cf52e56461f089

SHA256
de4bce7311cafe22da29e12c4fa08a857e6e4aad557989ba4d5eb1c893d2c013

SHA512
c45caf57de9f9c1899ec01e0437258effd593bfb5357e6bb41a30a7dd98e9d0e39822c5e930f0169d9b5e1730fca7bb001bbdb018b98708a2930ca4154d4e327

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
44924e76f55ffe7d00fe9197dfb4d404

SHA1
016ded869fec5f6512b873b4bd91f140eff6c464

SHA256
d88197f0cf820cde728830770eef7102d0ab84a601c095200c0c37223648cd30

SHA512
29b474cd97104ff68af5a60210ec8199251e68cb8c8e67bf49c2d95f018e1bad4f74cb170b77841ae0de36fd67112a69e841aa1f965fa7a910b465faec73aff0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
32cb3d04f35404c7a241093f0425cc6f

SHA1
741b0fc3d85d385d29274903195a30cbab5bda8f

SHA256
444497250400cc46a8678c62ad9c6d7e82bfeee3f26a83f5723e3bf5fa02077e

SHA512
97af09be0d2d333e76e1eeb9c2e55a2450b5767d9a66ebf8b7392597bfe778c72614f19b512e26787fceb3baf74ead276268d73a234b11325feaae4983e8c365

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57a6150a-ea23-4a58-856c-3fd20a0be611.tmp
Filesize
14KB

MD5
45502339b86cf7fd346542e9483138cb

SHA1
be28135990c744d5477e5415621be7eae0bd71c1

SHA256
d127eee7f874317a06df52eb2067123edeb28039e64a4f193d4466bb20e0a77e

SHA512
57c7fa866ab98e40a9683ebe650f5ea457ad4297531b0d4517a0090ee7792ef79414163c26933f16e834021bb2fe31f31e816cbd1d3d920834308e2670b17340

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
Filesize
16KB

MD5
bd17d16b6e95e4eb8911300c70d546f7

SHA1
847036a00e4e390b67f5c22bf7b531179be344d7

SHA256
9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352

SHA512
f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023
Filesize
19KB

MD5
0a14336abbc548520813b828af75c79a

SHA1
086f5856abab29bf91f379277375b307ce0e1aea

SHA256
1195b01401b90ddf6d350479b6e29625279b51b28092da8e903c986577dc306a

SHA512
e663e5e15220ca32cbbbde9ca17e43c91b814eafae4d01de4cb75e67cf7543b832fce268804c6cc48eb32b51ba40e4f187e6285fa1c84a6ed8b2da9a3e49164e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024
Filesize
73KB

MD5
09867090187e2af4a9823a9bae1c19d9

SHA1
9392a25e16dbbb99874c883a333e6b5262c89cf4

SHA256
a252cb0147f7cd2b42ea5077e8b56e511e767dc75a37cbf797eb32f297098b18

SHA512
f616b8551b5e54efa1a4a3229a83192760bc6f0e8f394629fdd78fb9c33c6ada5f59a3e106839563950a60ea354d348f5e998c889a1859e9d6ce2ae770b4bd0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025
Filesize
17KB

MD5
bbd974f4a2458b542da5af56c1e81032

SHA1
9be0883fdbf1c1318f9fc0d105bb1f0d19c94004

SHA256
915e257dd4d0a394ea0911930f9bd98f5ef3809ccda5913c774612f65a7d8b4e

SHA512
dc0cfc94e41970c7db45f7451f0a9ce2c18efdc3b8e9c1f9352c0580a5c9d3cbcd4da36fb2bd75ce2cb4167e566ca752c18a921d75f1e7879973bedb8c1018be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026
Filesize
108KB

MD5
077814f520789fe3e2589f82397df9e4

SHA1
32b281478a0289fd3e9960b7685d3ff4029a3165

SHA256
5c1aece00241d3a03ced1b5b7725d9ea4045e46774fcd6edee40e5ba3be5c6a2

SHA512
df15b6925b0991fa287565fc9641588f5594509880f82b8594e81e7926f5fd1a85111841895380ae9c022262e3aa160e17fcd582f1bf380944f41939e6db524d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027
Filesize
25KB

MD5
f0e6b81f399eb6dae59a1878d616f667

SHA1
33b323c09b5427ad35dc37018390bf1a3c1949f5

SHA256
0e380896a393abb813e08c36416bb87df5f7f733ff9dea4cb65828312b6e8c6e

SHA512
2a556880461a7b7e9278fd81bcc74377206dd967aeb141385fc8eeab6ef95825f57122d975d7ce4f932744fabbf7e95eec0ee17351d0db38c79939621e3fbf25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
Filesize
17KB

MD5
19c73397068ded824edd2c5b13d0a9da

SHA1
7f0f149b66309aaba41974d524ca69390a34e4f2

SHA256
8c93e33fb098c30a82d774c6a9db9aa92ea0e34586e907ed7d9d2935582c6100

SHA512
8795cd26570fe65181d49676dd9cc9a8012bc22c3e505ac8ed8c1bea68ac7db7f77d6bade360a403a8d79cc4126ac18c2c10e3b83a163e3b42f2e3f60c32426e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029
Filesize
54KB

MD5
e4a1df25ea46e1e7cbd471de0a7b45e0

SHA1
324e3bebce9ef6403111bb6056ba21016222675d

SHA256
10e13d065fee3e595d4e9c9ff4e411d7303861ae88819b79c89070813d03723e

SHA512
d06649371f9e4bd407f8db42253eb276bf89edb26ff3c82ba6ed38e7ecaaa9a32b4bd3f11ca41106bddff4f6e6c6810fa3806de73c746d2aebd5ae5ba4a6887c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a
Filesize
19KB

MD5
83bbe8c9d8c062d6e6e0398d7fc1fff0

SHA1
96e997b75f82fb4e9b99d5a41740c5e63e15ca04

SHA256
1e725b632cfec5ba1ba5deff6bebc8a0f5287c5e7a59f3d33167600f0eda6f04

SHA512
f657866170a8cca3fd446c198fb1c29a6ee524a037235e66db88d2e2f09af260463a5db0880e24bf774082251adde272343a580fea17a2a7663137fd024a9646

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b
Filesize
50KB

MD5
92b33aca764284ffbd132990fd22b61d

SHA1
a0b3446eccc7579443e56c9258acbff5b2c9b00d

SHA256
74a8fa4401d4632196b63b1c5fb05e51b1a6da769ec88ac524aef6b580ffaac5

SHA512
02d9c778eb78845e4e432eef585d171e7115a09152ad7369e2dcc213c9beaa642c17b6b0721243275f9058aae6e8d97aeb192097b4709fc07c2f4436db2ecbb4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c
Filesize
18KB

MD5
364643c24ad0e8c5b1c8db80b3f49bf2

SHA1
f1d7310e9b5f35039e706bf3621b891715cbe6ed

SHA256
7c7be964fb6bf26fa760adc8b97065735db7c78271fdb386b08a31366eb77f68

SHA512
2c5a1a81ee326e4d9a6c12fb0ee02af3f89f75755d8157121de8b9dea1be85010fb849c0f6deefb35e51c3c22610118a5a68db38271ee9782ed5b2e79d4e56b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d
Filesize
122KB

MD5
26afa1247926d8a4e9e57257b2dead48

SHA1
29efc829d5965bdb731d3e5b6d2e09654dfc130f

SHA256
72a224158e86feb2fab78ed652a34dc0a94457ca491f4c82510c9e52d33673c6

SHA512
23955db4e2cadacf17dc857c62f1a59e6d5a7e8aecd807e75b6c591239fa83196b661851f8375ab2bca262e03237c486393db1cfa55423534bd3ccf7f8cdc330

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f
Filesize
16KB

MD5
78c571f8c1e949189766dbabb7057d3a

SHA1
79b01b145f4de8a05b0545f220552b96053ebdad

SHA256
9d1c9092619c7d8d4d88eab55281f503a124dfca91a3b165beebc75286d92c0b

SHA512
827bf0250fcd62b5b6ca76ab055077126afe7530b00f3a7606edc078ae1e94df616c55d876a4770da9c266ab14430f866e547cbafacb1ce426412ec8739b9152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030
Filesize
19KB

MD5
ca7fbbfd120e3e329633044190bbf134

SHA1
d17f81e03dd827554ddd207ea081fb46b3415445

SHA256
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

SHA512
ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
Filesize
67KB

MD5
22434a1a358ac85abe874fda15be93c5

SHA1
f4e986a8e4647693ba7e571566ed80fda26e63a0

SHA256
1fc781e941db1b2c6e1ad04cfb4007a20be5bfdc151c5fc12a11df34b337b3f6

SHA512
5611cdda4459006b46d8db7c7648370cc6bbdb77c870f4d14b3bfa79cb7b1c7a3b707813013d32aa5859ab587ae9564fda6b70a72d280b500e3e99ebfc8197cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033
Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038
Filesize
72KB

MD5
d351e1ecee420d10286f89a2a61f5401

SHA1
4159fc11bdb606779e3ba41247279164dfe44020

SHA256
d2321fb2d72d655bb0efdb178a1531e2a64076ec80c8b783971311a9bac4279d

SHA512
6060a0316a49fadace30d8ee82c827e44d73245eb0d6068bb40e1705e52315d91b148bee9fe0dc3583eb34003abac6abfa40e92ba991cb16895fa392848f07f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039
Filesize
120KB

MD5
4a3fbe005b44daa6f0edaeede2499534

SHA1
edce10b994a9f36fdd0714ae7a114bd9b70d5bd3

SHA256
3d92730b8b5eb53f9323d461ad612113910c013fb0a0dea416d954ad9f578f9c

SHA512
564ed11ca5f4e30beece6781e49fc29a7d3ea48383b6df2d2496acdad4c459461556efbfee88b1bb29967aee76d658b1a635dec1ff0f7855fd891c318abb63eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b
Filesize
278KB

MD5
8ca5b4c94bdb9059b420f716c641beae

SHA1
6d0b9ffbeddf43792d909d697c9d893287b5c89b

SHA256
dea24dda6399ee36e9e3a9a330025d87ef7857412e9851945b053f19727ca695

SHA512
c744b390521f9b575a88de078986b701f20aef1ddd1bc7d050ab63188b2fa23f6f22729206f97d1058c7d4f7b2eefa1591a22ccd1ca9c9b7c2f70f329ff02819

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042
Filesize
25KB

MD5
51b6e0aaa809ce8aa080d68c24acdcc4

SHA1
052b0701a2aaa74d6dc2e5e09a31b644bb04e176

SHA256
45d2471f4a8596ebd07428c2385003af6d31a2e7bf0e59a466455c9e00c2a811

SHA512
207f91fe7c0c84711770a98df1397a4acb065542d8878fe07b30521b66046a8b2dfb54705ecf2d03e060acb1072c008eff1b9976d723afa0338555047bdc4371

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\98500eae0293259d_0
Filesize
16KB

MD5
5f816d51b0f664fbee137d0cc5eab9d8

SHA1
d8c248940d9da4065edbcc7255c1975716674e7d

SHA256
6c0e6605b01bd26d2414f0a5d42fa4a4519007ee43b58baec2a5a7c72e2849a8

SHA512
9dbacdcb6331969c31f5bf28b3dcaaf935792a3d4afd5e494ae441d9edd1754d3c8b3dc8d55752610fae2da71e6d5eda54c11b483fd2525c27e5babb8f205ab4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
ad09e8d557a730fefa6adc092bd467d6

SHA1
69e1884923e61152ac8edf42ad778e26192b3fab

SHA256
dabd0f7760c10cab81188cebd357004ed4eaa41b6e994ce2e86bad11cd5bfe29

SHA512
51ca40a1e0a3fcb44754d74ed33cd39f6d7eb68f8ad09a179674d30affb6d03aa2e3f4673ba363c13058655a74b8f58c0cfb69e42fca3d72e9d5e61682a85cc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
f365430e18e1d06046c368d74a69335b

SHA1
5b1c0e330453ecb15636c42cb45e4d7974b1f62b

SHA256
7854f85ed97529927659e9191847b0c1f9c82121b9be01e00805c760d2872201

SHA512
3ae57678e24a82833bc445fa9e0a0e2497107d521866dec893a9f976175966a4201eee1b5523ddf4de8b1372100345c1feea3bd7a7c9e61b4a5c5ba7ca3da68b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
888B

MD5
b57f6b66b23a0d346e3dbdf599a73a54

SHA1
5822dd9a3f2fb39f6f4a1299862a07db1c37abd9

SHA256
f68f6e58942f53ab435699636eca4c975fb12ea770982e625bfdf0dcbc0d1e81

SHA512
080554d901245763c11c30f05f8b3b39a2f54188a19c440a901850ca9295ca5cce90e1c5cc94b5826e6f8014a957bdad68d1e40b72b5949e5fbcae486f15f38d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
888B

MD5
b57f6b66b23a0d346e3dbdf599a73a54

SHA1
5822dd9a3f2fb39f6f4a1299862a07db1c37abd9

SHA256
f68f6e58942f53ab435699636eca4c975fb12ea770982e625bfdf0dcbc0d1e81

SHA512
080554d901245763c11c30f05f8b3b39a2f54188a19c440a901850ca9295ca5cce90e1c5cc94b5826e6f8014a957bdad68d1e40b72b5949e5fbcae486f15f38d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
8f0fa9d276d701123231f522c5ef509a

SHA1
8052cbc79a2b1ed23e4d810bebd54b856b791cbf

SHA256
82952a0432ead477c20fb38ca3148a4078285581c4385b557cd632e1b6035439

SHA512
867069d41ccc1f0d0c9787cfa9b96901580eab5ec3c2d6cb8a621a22d2906be0a726591555e213676d70bb7df69aa800e5d4f8b271c766529b018bb32cbdbabe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
e868f0b8ad4ac767a27aa06e2854927d

SHA1
657e89fc9885defe6263067b748d0d6fb2800669

SHA256
f4dbe52d2f0547b1cb801e5539daf75d96aadea15d5e6ebfe4ab8248520773ff

SHA512
4ec9a7210495faeb5717010e20df8f26539160292fab5607c86484df5c4bd1041c96b16e83681ecc6caad4f19a1278e40b1a03367747a371a47bcf1a64d1a0d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
09e4c2af1864c4110cde8defe6ab357a

SHA1
33614d5a691fef0006b3a655db0881191f4b1f19

SHA256
76b752a5f55e943afc6b075deb722f41bf3b5790977fccc118a88fbd65e3c038

SHA512
6dd71a57e4de3199a148749b417ee417f584b50da1be7de8c8a276470c369a80f3609af3c390ace845c79d692efb1d3b4be699a3f8a6c8a8771c9f65e3b049e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
6070f2e8e88746c054af18973acd765c

SHA1
816719e09d7ff489b6b5bdd8824cfb65efa65e42

SHA256
28cadd9b17183fb212898c91266b4038d39569b2d26648ff50681650785d8c4c

SHA512
3209e1b9ce84d196212d841570d0d4bad104fcabe0afa8118f349b17a1e9ad708fd3aef2e99d9d903780b6060dd5913896d4bbbb06f94d9f98b2e17c3cf679f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
0e0a1448fb87c2caf75bbfab4901fec1

SHA1
8baeaf9f00c8583e6cf43e3fa7300f72a77622b8

SHA256
fe077d78738eb588223d72f438eaaa582993669678d22dbbe0df357bc01efebc

SHA512
09cd8ac49f47e1d7c0494a0fbce4b100a425abc381298a652d9774babdd2d144cef50d75d0ac41f5ded50fb399521dff0652406475fbaf22c94191becaa13c16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe579cdc.TMP
Filesize
48B

MD5
6a58ce86f36e82e456469f903e79fdfb

SHA1
925609e11201dac333086c76802af31bd6c50e65

SHA256
c76b300bfffc43607782c47abface7851ce2f5c9d5ac5d21cb7e2e0fea67a494

SHA512
91c0f7c8008ac23ad86a6e4ef8d97a1b814736393a2f25a389b1c0ed1a5cf78ad192d080b1687e491630efbadbd2ceff004a277f06316be3c5c6c2295b0d7eef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Filesize
48B

MD5
f96fca2b0fd94434b8940a9e3002cc1a

SHA1
47837ad7742fbf4ed12cd7619957ee4e2acac988

SHA256
33bc96b0185ef3da2e494a1376879bc23cf9664ed884eb562d202858cc25bc7e

SHA512
26298e03d34f813fb88483c4bd52a26c94beded36018802973706afbcb22842b57bdbeb7b521003230689ffce53acb6ccc6ce5c783fd86195a4cd8ad09547c67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Filesize
279B

MD5
993ec9afd5558d3d96debf57ec5d7f3b

SHA1
2b30672275b4bc1bf5cca72c1e4eb661bfcb0190

SHA256
64f5c6547a025d0bb7d23a83afee84b074df7a4018bd436bf3bbc9853ec8c377

SHA512
981faaec8a0fd572ea99cf38c7b1d2f36b8cd51568e50d9f30c368a9159ba7474dbac14cc80b4be60eaf119d58d5c86db0b9afba15a17a253e47f8e782b21070

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Filesize
20KB

MD5
c8b17618f8a7cbd80e771e12537b5ae6

SHA1
6f6c6af1db69cb58cce53b957529064c91ee468d

SHA256
4fc592dc0366ac7c2f5db945c121863e99fa975175c992bec8921de387fda850

SHA512
df8018bb345d2c8148d37c5ed3d5b9c28a95339e380a6778e5803f3c1e0d063e285e0536c2ebf718a9064610afac3bb7b87479130b8914f58ca6404fb3bb05d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0
Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Filesize
264KB

MD5
dd1dcbdde2cdd173569e2278fde34865

SHA1
ded0e7466a5e6010568bd3d318b25a068adaca29

SHA256
ceca867bfbcbd96fba9fb328cfed7341a78f58ed4fd73ffc0aa7a4813c9066f9

SHA512
29e3e72832fed3ebe9d84781b980b71a443860aca3cfe9e4bdf86e8b47568adb067085627befcbb89e90f88f265a2e7d62f0b10b514a374a45753b48e444e412

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2
Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3
Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index
Filesize
256KB

MD5
fa8a35c93cd23346bbbfa2f678430da3

SHA1
0ca48896b2761f72bfcef50b2c7c8a4204b21efa

SHA256
7b1c9797e2377aef94de50fb385a2e29b0aaa865bff2087db7f72cc923113422

SHA512
c7b916ae013d73d12b797bccbd9238571e8210f44d9ad2a4a8de0a2a48b230488f55847e49ee948e4443155e157f9afeb8efb6bc1b34cc7f6452c6d0ddb7889a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Filesize
124KB

MD5
c22b36eef50a945a9f90fb950db1ff26

SHA1
f26ed5ab17db344129280c7109b976bcd0fc007e

SHA256
bf48bd67b749bd25e606dde61a26c16fa1585aa401fc56be5847f1ef007ea5a9

SHA512
b8ff4827e9101641073596877bc735b7cff58d454e135e5f947f51a7661855d5cd01bdae79a4625a2b4fff5f231306075a7364ee9d1a18db86f8cfe3e928006b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache
Filesize
1KB

MD5
4b9332819ff6480cb018f040c090ceaa

SHA1
8771354c82c72dd3207214e2b7a2406a30975c1f

SHA256
67044a8aeeb25d8f1241f26f436191262acd2c32d17fd704acdbd3dad5b52891

SHA512
eb4ea5ad5bda83c9498df087a5d82f383884945220ddf7f17cb4fb70bc743bab82b138166c1d6b66b636992196ce91a416bb7d03aa717be14b043366bc0e045c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old
Filesize
394B

MD5
2cbaed5931b7cc2730bbf949b79d87ae

SHA1
8c66bee495f5750a229540a2960102a727851536

SHA256
88f26d569221c1de2debcb52bb348d2c5fbd0498c78c892f81b0d17424128992

SHA512
2fc77689b52ad289bafd815015b64ca7c3f7b0f25663aaf81ca767615c2d97f17a91dfe5d769f0adddf72a5e2bf1f15ab28b97a8ae16966447da88780d4a6003

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old
Filesize
391B

MD5
42ec587278754263672158f3be1f9442

SHA1
0170a8b4f83d91534f1fde01d3be8e9c3399d9c7

SHA256
8dbf4bf66c8e2ccde71fc389f4755d785973a19e015c34358f88e4493f09b32f

SHA512
01b3f7155fe729b2659d55d39edd3c7dac21e3dbde4353a675507e99362ae1b1d45c3fe9959a5fc92cbad445a3149afc4c99018c6db29d49e111e563796810e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old~RFe5ace7d.TMP
Filesize
353B

MD5
ecd4a59e3eeaf352740993a97df1ca71

SHA1
d0c5fa04b1336bb1c345fcb09ebe75539475762c

SHA256
45d346e5ef61481180ed816fc9189058a8a337a3bb7bc0d1728c9ad05a1194a4

SHA512
eb1510e5bcde6fb7812f284910bf531f3019f42017b1028dbdb204fcc691f1f9173cbfb8c9906fe484dbc548078646b1ce9181e12b0bfd0a50576557fb800ce4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000004.log
Filesize
1KB

MD5
f35030b6b03f7e6b597678726072b945

SHA1
60e48ca9f88f9db5647b05e0e9a56bc3682bd7e5

SHA256
dc43ff722fda74d792f02aa4db7b381ee4e9d35c6f7c15726e1fc2995adb148c

SHA512
6ca27e359f27c55740f84fcb94eff701f374302098f1640eef7d4d16a494a1fbaf92272d6cb0b6f16844eb0d21ff92f89c692e16b07176db41a806addc4e8208

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000005.ldb
Filesize
60KB

MD5
09c38dce1f1cccf63887d05918cbf26a

SHA1
2d54573c492ff12512b6c1620d5f1886973db3f3

SHA256
f58c98dbd986f33bb028f32412aa0a0bdc209b203a89049b0d127756b19629e4

SHA512
da804708fc10fde696f04698936f7253631b12e88fc4523dc394767d29de958d4f95ae0ab16e4684620f17868dc4dd6a60e061a2c0a2182a65b5f0b50cc3e03d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Filesize
491B

MD5
51e82c67a32ea3c8a150023b5e11cf6a

SHA1
c6a17f80f48bbec46e01a4a19695d69dbdd79e90

SHA256
2f880cc803cdfafc12a246d55db67fce51674a5c1d359bd1ed986edf03678de2

SHA512
3a04d1a7f67dcd2a764ab48a50fa1defe4b473d08493b2d3545172984ea5948b539c99b9b8b64ce11222f6a1d18e9e85011ea16805956dd41e911d5cf2929332

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\MANIFEST-000001
Filesize
153B

MD5
83a09e8de26363881f3371ede4f41b72

SHA1
3a92a2b75a31e55cde1df76f6e04181881319f2f

SHA256
4ff53f209576e4524c9d86c60ec6df84ff63d675629ef54973688db00ada09be

SHA512
97b1647166bad8b2c0011f8d635b3036718ff31d4333af46f69481b72ea2027016a0740fa88e3ad6524226f5e481ee0e0c219a30b20ea3c7297ac604bf715bcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk
Filesize
2KB

MD5
2e35de053fe7e73d8eb8408e2699a192

SHA1
102916d6d06ddf5701e76a5cae9215b90c576af6

SHA256
06c1920e96a3fda0195a9e8b9ff3d3f2ee5c44b68e7d1f82e74c5e35850d19f1

SHA512
5e55d0471311a87c86ac9ecad6d2ef78b370004b4d466c8772e64440293d5e5cc9ab8cf0de56f771fb5e48b9415beba2f27c47e17642b7b067e496996a5d8276

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
3KB

MD5
59ed533e4f70e2966109779d7a3e55fb

SHA1
f206685a520f200616cb200bc7e898ef4bc9d2c9

SHA256
c7b5b3c662d1266186b0a17f38f96624baf251631e6235745ac4eaa0adc83d04

SHA512
92cc2c7a30b04eae0cd5f312bae3bdda1d872e6e3b0bbc3b13c1c2c15b9af82d0ef85990e711838f6b3f62e15b1e16d885e4c3779f3893971532d9cdee1d45bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
14KB

MD5
25d0b5a222684b0cb58572a661c6439d

SHA1
4df8663a646ee6a203e8f8475ba5416ee1969bd4

SHA256
6c27bec54084d0f404c719a41fe26ce92e28cb0816dbf99eb6f7116c60cb0412

SHA512
de73ec7c79fec360f2010705dea9434ef7baceafd0ba00d07149ff6ac371c4d03f205fd0ce0d3395693fd4efeb8c6aa2f5dfb0bf6b2717986e07e778a1a63c7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
10KB

MD5
b61e074e350a0274168049552902f78a

SHA1
4bee98e89e56b7fdb006efb38283c03f1fba4b44

SHA256
55e95dfae49a25a2476740bcc852c1645f8aa16cfab0468deab9de1fd42acc1c

SHA512
f05881921aae5fa0677f4b2f92ef8c3187d599d607158169bec90ce8176acd8e5267b4c6c3ae50816fa3505075983f339f57448530469f25e71d696a811109ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
14KB

MD5
9d3a43fe55b8b3c669ca4a0619a02927

SHA1
8c2eba6ff053465f26326c90f5593b75989b8b2c

SHA256
080f665eb13767036210f8a867ec7173cd023edcdca8e7a54178f192b76a0f18

SHA512
c94656bd016962ea5e496b17aa99e2a8c9c6a0e9de596db20d0f3359d661a989fb7ef8a7044ed085b4ff27e608270b926994ca067b505335574e6be69a3a22e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
3KB

MD5
1d7622769e022d1a6e2232be6d6d11e3

SHA1
5739e6bf6a4a0953bfa5d20c2352b6fbbcd7db1a

SHA256
e70a7c06e732a035ca957247e07f8843b9f247fb3d7837eeea03e2b4bafdeaf0

SHA512
1b3910dc16487e85d6729186c692040bda6eac12b9d685163e104e84cd258f978a7c6de8688e0b6999dfe63e3b6153578a22aaf344d9977caf45b6eb45f06185

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
a33a41e31b4d13785e2aaf79f7947c43

SHA1
33b4125eb3980b4f61b8603cebe5d938f1e94e6d

SHA256
f6fefde54f1ad966577efdb62aa24ea2effeb6decf1bcd84e8966e1205002f64

SHA512
8b5386e8ac5394632b40e91d13cc90d7f7c4277e04284509d7bc1ed4764ed62c21a58dd0e114ae449b880a41976f4032bbd8d8f957177884d02adaafba1c95d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
42578ae98893a3e6cc01f651a857206b

SHA1
6168716575d2b347995be832432ef93e4570a4b6

SHA256
dc57b450bbe63a2a95f84fc4b3e9b19f62cdda0325775b813d3af6074c107203

SHA512
60b06d1d49b5f3d9ce58a11dc2f8c575ffb53ee8635611343ef211f217bfb7a5a1567ed9b4726e8b911f701375cdf94ab7046462dc49766e0ea9056608b55445

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
4KB

MD5
7c47746afc89cc4d43d05b67f842b834

SHA1
a3242e6e5034f5a27d51beda17e71181e3be420b

SHA256
e9a0ed017bf9e08a18717adf7a3496f7c2ac798de3234b44cbb3873f008b5248

SHA512
47f9b4b6bc4b78f65600e9efc85ca5b858ef4441f563626d4ec42e76b5ab5e403bcc78b5fb4beae50d50eacce033acc3f2cf20a8a3a5446d9fa954919593a816

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
19dc77c11dc1af75f141111afaa2c741

SHA1
69b6b16049e435c377ad7be9a0d1506feebe8e82

SHA256
983e270b4d9dcf2311b628091bb813ae06f3b6af9d2502265f83c3aedee18cf7

SHA512
b120a90824fe4123f84cc0577b3f770d093e20a4eee207d704004cfe2bc9e979112e14822602f609a8073bf8aa321cc1c6f53b3735f64b524b6d362a5943be6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
2d670fb62796d0393652ee8dfb18c36f

SHA1
52f482b6c4be7e6b0e8684bc33973d6920c61148

SHA256
b9cbd1a0032eb04ff6909dc1f42d955504bd27d413fb6c4797bb3ef3e4862604

SHA512
bbcc16536b1046e09613402c7fed102e47c4cf8ac1e9540717d865a116361da4973a787b9e20f415ea988b338ae173ff0e9ce3e16f6414fbcb5774687382eca9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
2d7b7cda4b34c834fc98f2814d634186

SHA1
0b51687ad7b8ee456c8340ffba49c5a5a2f52164

SHA256
488ae87c859308ef2eb830a6b3b1cfc200d0e3fb431bf4acdb3c745670ab221f

SHA512
b37b3cbb5dbe09ffe8863b59c6e45ee8c85cde111016857a377c21d8db63d418e6f3aaee8ed2bfec8a6031b13b9e55fbcf678ee4d82a2a553e1fe00aff10f02c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
13KB

MD5
130a41a89e75f6a8855e11965fd0ac10

SHA1
af0a0cc86d05cfff03c288d4268b9dcdf1a16840

SHA256
c110fc91bff7544a7c0c6df4b0fc29f8370859dc938d2debef44531c6c53201c

SHA512
2b43e9e3572d0828ba64ae9b8668abd26beb8e3bebe6d9fb882428a6061ce7573371aa455cf98513f8b89bdaf544cdd6b831af1053186cad7866f44faab7455f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
fde8e78bbf53c42d3fac44c326603c89

SHA1
f1486e3a813594038ae7b2ae956e79e37e3e9fbe

SHA256
a8061efaf1533ee5353e07b18a1f241b003d7bb578aa397c5d6ac40349989dd3

SHA512
06e767bb3881ec0f4fafbfa26dd11836d0022f63720a3c261ce1f5e5bf286788b575065ff7a3cde707bec1dda8e512912417daf5cbdbab74be7fa8f5b00e2a71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
45d57b5c9a9faaa59b4f2295a804fffd

SHA1
d5fc90233db4991f59b5bc70ec9f4393d7300f79

SHA256
cb5ebbcbee824704ce1041388449e17025d6673d786bdc6a7c8625ed0144f69b

SHA512
0efc89c04364c7c1050f2e4999925b39e201c75c59f9f5d3065ab9361ddad2f12f8419b1af9c8d6245794d87714da12f1cd3196b87020a59b2a154780088a566

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
0b3348f1be251042da2ea1ed70f328e0

SHA1
b553dd6caa0fb37b861c153cb295634bc1479bca

SHA256
ad6378d1108332c38497a65dea815fbee3af907a06fc62d697ab6f97b1787321

SHA512
468cf26ea000e81d370011b677a1d5bab77313442f541f7ef66c709c0c5d6893bdd483fad1461289dd1053bb20a773c09438c4bd4c100ace0f0d918382bd1a13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
6b5e0cbb209b5e82415fd1ccafa4cdfd

SHA1
22d67c1631b1412165a5ae798ffd3cfdfa64c23f

SHA256
52c739acec95a8e92fa9dc13c1fb7d5a23ff4b6d17a6d1589c7738aee62911c5

SHA512
fced1101dd8f28f39b1728d2f284818c91fbeb3d1b012f0a6c21220f4838e253b9b756eb5ae21016ddc720eca57de3d60cd0922e665d0bac4c7bf80bf5585ab7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
101c28f5fd8d5ee4a2f564213f222065

SHA1
d0a7f4a2e4809d3fdfda6a208a7e89933ba297e4

SHA256
a12a335e74cb3736db47a993efc5e6885d16f1d3e3df55941fa2ef1cf56227b0

SHA512
9abe048b5c99a477a89a9708d9fd9a3c09f6bdf5fd2bdd5b3d0699406d378611a1f72b8291f46a3d66b30721f4133f28958186d55cfec91dd07a2d647fa45794

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
cc131593812c0bee3622402dd6d0322b

SHA1
90137137eb3d7dd07441c32183898783b74993fc

SHA256
1d6401bdc60dfc9ac786a72aa65512e3204c3edefb8ba96f6cd7bec2aa97310f

SHA512
ebe81ecf2685a7a0cdb912f5eaccda112da9a2095c805075aa04a8528c05dd9856e573d16c73393ad1c06a43f2d65d7637eaa3de47173735663c9b27a5984da3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
dcf86f17109a383d46e3c4c620aff84c

SHA1
dc9dd2cabf2c5ed101f83fa9ca1a2b931d2a49da

SHA256
e1c9040729710bc6942983fb07ca38caee705d1f0590568806c8b9bcea60b027

SHA512
b8a25815eae28fac26905002cef124616606b089559ee124399f2bdf8005faa8c53f3be8d9a226be6eabaf65196f98f193653e7ec87ea94a5df54f944141652d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
81fcdb77ae8a5e3e1939dea746cbe21f

SHA1
eae214049af6574b1eac32bcc2825c8d3ce9e757

SHA256
d1bf0de2bb817b0bff54df68889e1a1f59019f3e5568c0ffc03a8d254eda2e40

SHA512
767e0ce2bc0d6521125733854e1f4471c9d2686820a0ca368d80e37e191985fa5b69de682b96ec3e215d7ecdc6de110c81d0b31753fcb547df767b3601d7e272

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
e5e8a6008e4611dfb2e81ab8337469fc

SHA1
890cc219fda7b601d3b2e8f72d6d5873e61fdf3b

SHA256
73f63c7b9d07db0ad5747735aafb71fba71af32d7bfc608c6a93f8d378c565b1

SHA512
aaaab16d6ef4f8c4b70a0cf9413fb77b273436f1e441974d3c9bf561e739d997fbc2323e1b21dea7fb9673fc04ad415822063bda12481233931f5e8567b3e2ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
5304ae3decfd81bf04334ef1c988f910

SHA1
f766b6506f1632e1b981b4d28eec30c3166999d5

SHA256
16777c86d3ff4d4a0a04a8c4e9e1568f7dbeddba84f827f3e31d1200689ca7ff

SHA512
b18c6a8fbaa19d18fd6285dde59676c73c0f9e1270657fb6e67e80afb80024870b84813abddae278db832f23e65992ec0c850256e655f826866c82d3b74504e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
165e32b5ae4bd3844d7a4e8633da068d

SHA1
27909b400d8e4636142148d3d5dbf78383e41111

SHA256
9db1a22bd50facec752064642b0d13958686b9e2c13e1501ee83f4b59e0773e8

SHA512
7691c0e985155830fc30f9aa6340340891d330ba9e19b2ce20beff46b84f092db12b11dd05ff4b49190e0ddbac23ec3999c59c3d00a06786e59683d067c86396

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
165e32b5ae4bd3844d7a4e8633da068d

SHA1
27909b400d8e4636142148d3d5dbf78383e41111

SHA256
9db1a22bd50facec752064642b0d13958686b9e2c13e1501ee83f4b59e0773e8

SHA512
7691c0e985155830fc30f9aa6340340891d330ba9e19b2ce20beff46b84f092db12b11dd05ff4b49190e0ddbac23ec3999c59c3d00a06786e59683d067c86396

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
b74e0e3c8911eea79226692c97b4a20f

SHA1
7659a3374983c41fa8b2aa22c9eff464a6116931

SHA256
f3cb75b09d79dd2e5f6c6029e517c65594d5f30afc2b50672842111d75b0fd04

SHA512
b8d29783ec848cd362841dad076ff097e7bb142dc504ed5da5108c86614c001b4801e851dcaca15d8d8731a727a86ca0555a13fd0927eb9bb6a96fe4a56946aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
7KB

MD5
bc1d26f07c4eafd847edb5e1932629d8

SHA1
8f08c89d5d3f0f4975da28b79f45b0c2b2176af7

SHA256
ec19445b4a0aaa7aff7e1d87a719d2a3e3675dbf7d1e49a16b2931155886955d

SHA512
c4abe84227b62a040964e9b5114fa419bc870cf0f9b4e835ea99af1fb0fd70f3ac5988e5e2fdbc7203115facd80a44377e4451677c8aa9dc271aa33ca0e53e7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
24KB

MD5
d53ac35ab3976e67caeed75c4d44ffc1

SHA1
c139ab66d75dc06f98ada34b5baf4d5693266176

SHA256
647867c7236bcb78b7d585b476d82a101a077fac43c78dc59e612253fbf69437

SHA512
391355c71734ded913239a6db10a3202087e756bccc8e29411108f21b3f2460d9a9c606619aadd785285be70eddcf61ef9519441cd387cd3823c1399a6967cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
24KB

MD5
8d7ee92369af9a61cce705c5a8b901a9

SHA1
8e58ab896d740ccc90d71d10474eae15c052a566

SHA256
b4912d40980b666264a31ef06e7722d44881e8acf92df8a3338bf74519cf353b

SHA512
0c0c12b521a3a5780a1428c3166c04ed028adb266c250dd80c4ff2cad62c97793f9f09c910d0cf2615d70cd99104f091429f57d25978ca7822560cc67ddeb423

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e768ff26-e9aa-4056-87d1-0cd65fe7ebac\index
Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
8d7f7ad764e7dcb856d8515f3834f510

SHA1
d57e4b629454d459f7e988419c78583329a42d88

SHA256
67cb4157d0ed18e490922994b911db8d11a715f9319d2e9ec7a409e9259ff2aa

SHA512
43e6fc328419581aa15e61c12591a41e836a23460b1729bd522e633bd5d60fa06018d5d33d3526b5a4fc65893a78a162733933378aa9afd1b36e3e3e4922e8a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
903f76c64e4449403b81764cc2ed7c7f

SHA1
66342d623c4ef55fd6c423dd5b9545ba832ff768

SHA256
e4f7626ddfaae8afebb7eb17e54edbec0a726b91e1fc7828f4a403c74364c5dc

SHA512
f4e3fdc08b9db1e1893d75add3c1e8e10d8808a589f48242660653c210bb87464eff86319d08a33ec8d67950eb0ecb952df63c1ea141aa06226806336768dd08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
d08bbd31de6222e6e22d3eb935adfdf3

SHA1
14d93fd38e1c79615848924b464ccf5852114f03

SHA256
4e3a170b65f22a5ba0f38b735e5bda10aa4a9f8d83c87006736a112cecbaf1e4

SHA512
a0f4c029aa07eaf413926fb36551684a4ec3755b33a35c6e4e3b19adea087bd3fee93a12728d54af6d0e8257a6840f4ad1d783a377b62eb7d58011275d54404b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
84053ed9e5825a3401710862a0fe7ca7

SHA1
2163c68719ec6b7e2dbd3e91e7f277cd2bad4d95

SHA256
7e329ccdf8925f001ef59fc47de5d9b1f863d11d0d8e1b943639906a91c47c6f

SHA512
c1db92a422e138d7647bff340501baaab454dfba02de8cb55907363c0706f208a61cb71534a48d16ca65c74e4282103646113aa276e91be3bd7b4b004850474d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe572eff.TMP
Filesize
90B

MD5
0da527cd9fcba13253705e116237ead3

SHA1
3dc3e5069669f5bdb1aa92ecdc325c1253815051

SHA256
c38754cd76fe618a31167a230d9dfca4bf8c98c55d33d9e96085f11faeb0df96

SHA512
f073c72ea0d28d75177d281513583d797196a494e8731485e0699c73263510a3e2e227044df4bd8132e3ab2180b269c8b42fc9d15dab2579219b2d607602aafc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Filesize
3KB

MD5
aa0886e4b090cde9bd3ff2eaf68c9f70

SHA1
07db23eb1823c680204fc7013604369e10959e0d

SHA256
dceaa231c3a78e341c573c4f26aaa0e86d9e8ad85f1405f2df11c4f826ae4b50

SHA512
3d93c91885691ffd3558a3560ff80f1562e3519c3ff4efc796e36ec1e2b13f57dab1a8348ea24851812e6532136328b8b7fdb615fe6452625fac941e3c003426

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Filesize
279B

MD5
e9a92891b80e2d175387e793268ac950

SHA1
dc55fd8c801aa3c3f676119973afedd7a4044d84

SHA256
7c52d7777b1724815c22cdeb271b65a977f05453566e8222e5ee5de9c20cc1f6

SHA512
c3284e692c67f7838ee335a5612ba5c0dff4e0d8ca247389a41e8cb01a1e6b4c66b4b20fcf264e37da4997bc2fed24db7b16b66e67e892568da8b4e521ea3987

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13325335305971186
Filesize
4KB

MD5
fcf84d617f1f99e7c5693610901d8c58

SHA1
38372f7b9474bd997bf3b9cea248d5b5ce4a044f

SHA256
720d1bc04b3bb2fff2bd3251c1a5ff4818aadc15b05d74fcb7cc3d9268031ec9

SHA512
e9488938feb02b5627033c22c64eeded1429a11ded785cdc4c2c28202a31749958e0e69ee0f47e28ad4efb85f05cf125bd579884c82163394798c74daa41517a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Filesize
112B

MD5
52ce685cb0e3e18b1c8b6356cb19bf89

SHA1
4c62d33b94a2f0f37c267d0472bf7deaded54d86

SHA256
675f78a909714a227937d6e37770379499d26d03f88b07b5a9a498c50be2f576

SHA512
3415c0911ee371ddfddf4af87b161590d0a17e15a954aa6b8c27b255d21a3cd00e87719ca89afab876d647c638e2602a6cd5e005fc21b97836208a3ba9a32624

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Filesize
350B

MD5
9430986a5b559f0c306ccfb9171fad79

SHA1
c8fc072211b425d5aff07c97797d7736a7efa61f

SHA256
a6c1cfe8ddcbf013a85926b57d398751b2973888ea908712595e548beb67a442

SHA512
30c2ddb8c55513af9d6f948589bf5910970398a0507e88a03880915cb3678e59713020dd3626be160e8ff41e11c0653bcf8fdc1795a026c646583b1c8ce1fa15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Filesize
326B

MD5
0c0c83e93be2e9980d82b0f90d04b92d

SHA1
79ac287a056433813ae553bca2758dfddd0e8bda

SHA256
d498013645c348c0f83f4dac9357ed15bd60827290669f61890b828c81e2a2bd

SHA512
c1573fa552acb1895e6dacf07fd3bd885e2af64688181404bf56e33e59f434e4c929997f68e52c93366bde5e5099503e14001b4c3b797b6c07ddc1ca0b147e97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites
Filesize
20KB

MD5
f44dc73f9788d3313e3e25140002587c

SHA1
5aec4edc356bc673cba64ff31148b934a41d44c4

SHA256
2002c1e5693dd638d840bb9fb04d765482d06ba3106623ce90f6e8e42067a983

SHA512
e556e3c32c0bc142b08e5c479bf31b6101c9200896dd7fcd74fdd39b2daeac8f6dc9ba4f09f3c6715998015af7317211082d9c811e5f9e32493c9ecd888875d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
370B

MD5
34e36bc8bbaa99a5a83e9c11b35a1a31

SHA1
55b109ae6eb7d7dbc4ca6dadedd37431bb69b50d

SHA256
57f8b5678710d8878ccc3e8835517d72e25f0da8068bc65e04cfd3b955c306f0

SHA512
245836ae18570fe7f8c2b00aa8fcf2e9f32a384ff5b1207a73ec69ad1989e205dcebfa5a3a9a70808902b72a00d217262a21dd214b4e289346d3b75d94c11142

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
4KB

MD5
7af2fa758b84b11d3d1b4c32adb63ee9

SHA1
ea02af739eb07e53c6b57e179fa2582bd3645b25

SHA256
85f65a7568669eeaf6aa4a8972c87f1d5c511cda251dc6e42c8fb5c43f13cd41

SHA512
f6b245eb1b824ba1c10ebc67a9ecffdea768fbef51d3e26d61fa44ad2fd9b21e280398d0d64d865ec67b8bc4a9a655941197063829fa642f51ce0d21aacfdf8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
56d552e488c09c6786174bd1c543a2d9

SHA1
53d906a704d731fcc844ae194ea1a3b3c86caf94

SHA256
36cc8a9032bf3cecccabb29a4092677a3f7a13ac34dcabee8924cfdbb257481c

SHA512
5ddacf861cbccb65ef44f9a6ba66174c5c2e7729b092539e0278658b079fdc607ba9a12279b6e151fa9a2c38fb1fe8b7d5cfaf6b319eff1b7c7b5ef11a801ad4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
1f30e6a5a721b33597ffb66165f30c51

SHA1
3586d35887ec7f02a5d99c24d355d900dfce0a51

SHA256
55a1413b65c10c0c9af37ab66c28ab3e3fcfb657ff11d327e23ec440a98e85f6

SHA512
e4084b44b531d9e127fc1631d9155799f10bac6bec933bdf651ae7d18fff2313469c287a97d36e7188daf34fdc21a4790d571784ec6b843392d80ab853bc0e0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
bc8741d7f828c89a045741d526536d9f

SHA1
9453331fc726a126709ea6b085e171703faf2cbc

SHA256
f58db996da25fdf33bb7fb9ea316d053bc4f3cd4719c16889b71a43fef67d66c

SHA512
83cda92eab14c13e32a5b73f0bac8e1b7854157434acd7bb6ac5c99d8b6e05f11ca342208897fb66d924596b194b7dcb35d56829772e5650c875fbaa236c890a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
cb45cfafad9e16499e6be052afecc2b6

SHA1
9b85b13c55066e20e1c2b0b3699488112446b690

SHA256
524f3aeb12b642b2b9854cf038b18f3bd916849e90d35b0bd7eb3e4dff571971

SHA512
597ebfe34bc648c120d7001f4cc768c9309472b1bd284b0978a55b3d1e75632578eda326939a2c933d6e2ed2d88a9ba2190e1db793cd32390b2679fcf98ab5cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
1def92a260b84a8e6c407169efa4d287

SHA1
c06aee4e07b2446ce330b9851195e63b730fa3a0

SHA256
d83598de1a60e859034c4410f452ceb59952c48a00b882d158ab0c1408e53011

SHA512
ab497b129c6cc5aeba191ceb8199b94af4acaf1af6d23d53d37010abc75a248354503dac70dc8914b80448169f2fa87fd6c620a87c5e73f1b5b563bc07df7c40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
2224314690c54a45e5e8c800b2e50ab5

SHA1
ef7a78848497f38c208fbd19bace35f7c69b827f

SHA256
a8a457d4d5887a0a0020d7e8f0cd21ae6e536a418239014eb943d5fc6653a225

SHA512
96b821669f857fae9fffa943fbf66daf8400572e1b24189eb1486c21c67d4b88e472fca6f1ff6394cda7e972d559bad49c10c52519a08e6f851bfd84fabd9270

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
55090fc347088f17ae2da0d763664f16

SHA1
dae5c26976ca48030e57767f4ec26f381a037db2

SHA256
f4c81b87af8bf179ee87611795690ec2a7364b84088c5f230ffa1df3814f9a06

SHA512
700fca9d0735bb2b4b362f8a51050956f97be5ba304bcc01b33eadaf32196289692fb48cbdfdbb194ad536df31614c0131857247ae701190af5ac19ac543fa2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
6e8940790ce3df4bfda155a0af4c2ab4

SHA1
dd84f39c98a529f02f2254667573b481beba6035

SHA256
427e427f2bcd8d61a2e4c2a9f858cb13ea84f83e11ad7c0f034c3e05c2a68696

SHA512
19176a4e6fc850d1cdfea5ac12e9b7650ca36ec550c69d587f0839f055c1560daf051989edfedc68210e769d19c372441e3c1a907e8fed79ebdd3bf44b8c3aae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579d78.TMP
Filesize
370B

MD5
576c22252da14c62188053fcb931dfa0

SHA1
0238dc44e4665c13831a0a8790f9d998667887bb

SHA256
9a2b3092c8f7379b1922ac1af79eda48bf9d8cdd88b91d2a9b4b13904677339d

SHA512
4d021e0304ea9e90ef8c4891236602f74abe0d2efb0c40d1a46c215827fa5b6cffb7b026768bf8495c78274651e150b15eb9411c4172b6990a10b16b9c17b6cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links
Filesize
128KB

MD5
32257d2c7358b4e452036ef8920968be

SHA1
1234522f42be8c31b807170aeddeca8656cca451

SHA256
d97899fbc73d4e01c2f64c2e587c12747b1450193e6cf80853812f1715f7cb97

SHA512
2c093f0bd5be3d6eea409fda08109456d468d45592bb53796dff05021987b8ebc53e82d8a4a30d271fc40b946da37033420249c8a1688872f50c49f8897f4ce0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Filesize
116KB

MD5
f70aa3fa04f0536280f872ad17973c3d

SHA1
50a7b889329a92de1b272d0ecf5fce87395d3123

SHA256
8d782aa65de6db3538a14da82216e96d5e0a3c60496726e3541a8165bccc65f8

SHA512
30675c5c610d9aa32a4c4a4d9c3af7570823cd197f8d2a709222c78e2cd15304bbed80e233e3674ec2f6e33d1961c67fd6a46dc8ba8b1a301cd0722932c03c84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a91d48dd-104b-449d-9f6c-59b9ac4d83d0.tmp
Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Filesize
52KB

MD5
39f0e8b32b7cfa2c412f284f40a420a5

SHA1
3a4ee9c705a0c61b361aff6a8ea28fc87d4fd375

SHA256
ad0b4b09b98d452f35b38ecf0383e01cbf634f1788f2cfdcc38ddb77f769f286

SHA512
59f00591645ba68da0134ee4aa7d909dcfe99fc57300321d8e3d0bb7740939b5faed60deeba270f9d2df6e52c7761ef868e4c01302a1198cbb971ea82147e9e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Filesize
187B

MD5
848e348209562cc84c8064ee2b5998d7

SHA1
06f1f806feea6109bde4de892c4118d729e6bc31

SHA256
b40ac9e7846cf6e7b0cb9b9fbd7056733e5c4974a42d252ab317dfe8d5de3f15

SHA512
a2e20fd9a519a7f4d9f399da1909e7fd3324178d6bf0c87fec753cb7a3870f1e9741bd6cf20d46ba643a59459451b43f18540a12b725c1ed69a41916d530120f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Filesize
279B

MD5
8dc0b16237aa2b1488961d0941674ce1

SHA1
23cad823988e028888443e16ac9dcc8e9ece2dd2

SHA256
a62cb7d50e83bc06a80c80a11f3deeaa9453292ea13775fd244bebffdb47574e

SHA512
7e10fc98da01db559cfc2f08fd9ade9849a4e59151b45c6bdd40d903a79cf71e8a6ca3b4b6c9d4c60b2df6f123cdf8449f76b39e3b59e8a6b2c6e33bfe8edfc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Filesize
531B

MD5
7d59680330ff82df764b569974434d29

SHA1
76584124e881292daf2b7e56902b7800462dea94

SHA256
30948b547dc3ba1e4d0955d2ae2409e7ef38268e1c9b33ccfff1b8c654433ea4

SHA512
0656ce9cbc3f8ade601bf53a4988a7fdc1168ba2fb19086e4dcdd89b604efe949a239daac6a0b8cda97d07f94d43037a9848ddfedbf9eca65470097170ead75b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Filesize
297B

MD5
b90e64049921738cda763cd45c864cfb

SHA1
50b57209cceafe89ef741aacc7916d4c6a6ab668

SHA256
e35a84db921bd4b1c32842935991512ff4b695263c1c11f6ccc7f5bf72003e4e

SHA512
adfb9abf2661ccd250477ec82a9ed65c0e0448c8f0b493f41d99f6948b9769ee5e4203753bc2156d4c3eeb268ca82dca4c355fb24a82519ee4f77ef6b58d206d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1
Filesize
264KB

MD5
75a05315905b36765919f3fd512d7fc9

SHA1
a0566d933419f642d10939551a4c3dcd393f3516

SHA256
e928a07da5bcb2f9d04cf6d25c9bc1ec696f6f0b4cf4d7bd805804f84e012a0f

SHA512
09721986c380348385dd327c4b11f78e6912d43d28d82059c0eae0a430facb575b9caca4b91fca381bdaaf8ad4d442d15a78febc27f9008f2c30294f1d1d5735

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Filesize
11B

MD5
838a7b32aefb618130392bc7d006aa2e

SHA1
5159e0f18c9e68f0e75e2239875aa994847b8290

SHA256
ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa

SHA512
9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
1069801d046422a90f8115c70165f3c7

SHA1
e33977ea6d10d22283967b501d9491a5a5ebc7e3

SHA256
3fa98086257362c9eb066f305360f44114118d332b2166f290e45260cc3a7c5d

SHA512
2b49cc4586d5adc5f2eac019e0bf0f93ee0c17ed61b3a419de02ed4cf3dd6e5f94bfcc226e2a9dca89fb8d543b16b7dcac88d57272bc163746d80fcf6e068104

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
466074e61c4c252f249ec265d66c7613

SHA1
9e5cdb5d9d4878c182754df11c02e32ae2d1b7d9

SHA256
b862c893ff3a06911c1fd3eba5177aeef349c86ca65005dcbac42e8e3a57b8ee

SHA512
cc7f266076a11546a8205b1bc6de38559e62c84c291a2b24d5bb097f6633476909590175aa7bb155d8a0f43604f6c95a5301b424487ef768b7b787e26c5f00c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
cc2d0954209579be8574ee1785b69a90

SHA1
d8878691327ce80c5171a942ced8dc1257574a99

SHA256
0ab311f7fd575a3524676c0a7fbaa4d0db1682a4b2e1d61f1536dcb7473f692a

SHA512
8a03a3ca846f189cbbd2f504726ef6362082644cf95d8c38caad41701a4ca9b5ecd644e4a09c1a0ad503027564f969c2cf79c62fc19daf1c1ed406dc864192f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
9KB

MD5
1882c0bd15a398f9f400ec9a996d3588

SHA1
293b1dc341e427cd2aac8c71bb400d2bbdd46292

SHA256
4033883174d88e77cdaff11fd86cf5ab3531e6ad93f2650eb9326531de110add

SHA512
e603c8ee2620420d3aaedc139e5de9f53f063456fc64153fda553cfc44b181e247cec3cbb7decbf966e1e8f86fb886be29d3a963b04fb498c11cd089f4ad207a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
4f2bb1cbff195b632cc1b14b761c96b1

SHA1
83612b388344f0acc100c24bc24a4c2fb676e55a

SHA256
23d5b2795c2e410cf97a85b6c9af2ed89fe4bddd7ee9229f3ec9372884c9a5bf

SHA512
7e5be3705609e7c2896deeecfbaaad048fb834a5843c05db5245f3eea9c9402515e3cccd9ec115b4ab39608fdfc84894b2055d8a4897d6f6495ed3df85d2ea2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
1069801d046422a90f8115c70165f3c7

SHA1
e33977ea6d10d22283967b501d9491a5a5ebc7e3

SHA256
3fa98086257362c9eb066f305360f44114118d332b2166f290e45260cc3a7c5d

SHA512
2b49cc4586d5adc5f2eac019e0bf0f93ee0c17ed61b3a419de02ed4cf3dd6e5f94bfcc226e2a9dca89fb8d543b16b7dcac88d57272bc163746d80fcf6e068104

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
c8c9e02f13ad2acdf87c8e8a8b50f18a

SHA1
a0ce2c768be256c6c618f8b75ea21b9bf058c359

SHA256
b6f42f0e198e5c9a4116f31eed41bf20a1d2acaf88cedee1ebcbc9d318026729

SHA512
30bdcbd8715f9b0cff7b948b50023605ff6abc3f573286d528f589752e49183ebb33ccd3e14f6cf2d344e8e5401674e7727df016080a9c2f273f6f83f1ac762a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
430869db94cd01cf5306d390d2db9975

SHA1
f8c33f0b318d51a8b8b5e697015bfd1acab1eff0

SHA256
0714c6286f025ae98b2cf374fa36ec45ef1d8334710e09cad20f2c90a7957921

SHA512
ef39271c0010da4d6a4daa9e32f73d5be6f9aa750f21fce0bbc3d8aeba28a8f716ff3cec1d386ec4dd652aa8e6b0cd0966ddff3b390aab52535f0b53e2639482

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
8a4c1153274ff1d6a3cf044f5af728f7

SHA1
cc8e7fadfdd7609447e69a636172d65e4a544623

SHA256
5024dcfae76fb7c9416d0343356e84c80a1af7a5d940309ecfef84f90397a25d

SHA512
f687ecf7af1d7a3fa5f897f38cf6823cfaa780641c54dd64430686c6c871fc3e6c184b920076ccae85441506bd6c904df6905e7d556da9d370152d08f938e915

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
60f8e4e34bb8d8a53aca9b77d6326dc1

SHA1
df15cce7307c929cf0b35f48bae5064f4760500d

SHA256
9e72a94ee20818b4bc5ec42c83ce370a925467cb730afe448b0e8ece561aecaa

SHA512
ccea5580716bd0729fd55887b32310239ce8600f73edcae53c4c76d9c722cf57347740b37211414ad27e44a254290cfce04a8c1a93e8d7d47b08daa07e3f4acd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
8c79a4956cca2c4d9e6d45134f8e8912

SHA1
51e557e9f06d976291fb2f389041149191f56211

SHA256
356275e71ad7c3e8e2baaf29031043fe3b53d1a62d3031faba7ef3f3156a0f1c

SHA512
b86ea60bf71955a4976e10af281bb977885e1bc877e76349e092b4a43492a0cdbec4270a410140181bd0baf9b9035edf91d4b20dfa7925535cd8e11488399e46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
3a7fd76a3ded2ae06682e18da4de8689

SHA1
c4ffa4240a14ac2b67850f8057ef7c06a3e29630

SHA256
08af835b06e459d7fd2e8cd3437cf1583475bb6d2160c4253d2276bf5e31ea12

SHA512
76ffd1a1ea91151f4265513471acbe9c8a9f3d1de2d6f1292919d42d62e57fca96d0156a0d4d368f208dad56885d88af7d7aa5225b74c1bd4f28d6c0b073d568

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
bae51e5b76b90792da05ca3539f34f30

SHA1
a0bf087702d23b444af0e178e3deff03fba308f2

SHA256
6d2ae5dafe9cd59de56db5c4b437475ac7e5a760476dcc7b8cffffe79aaec929

SHA512
3591a9b892face911c2bb28618b241a16a36d4c2fe27f1f4923c43fafa36a44988cc5b6cdf0b12f6e7a603ec503ce6a7d2f8e33d16a788eb2ff738917ade373e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
e2c449f3bb7fa14c5c5d8fd795be3e54

SHA1
4b3fa1b92549081bf3db348da7dae50e5d96e4b1

SHA256
443de22a0e4d6ff37260c2af86dac9536f66f653c049801066aee4d6424b994e

SHA512
0dc31409c53d4f9360590a02a9581ccc9233e64206443dc0a8ca5a635a45cf0976e8d7a4d4a3677b47121e076e59e2f6d831073e0851f28931fb2dd3b94b4ac2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
7bae8850b342f6c08365c99a7ced8df5

SHA1
91b64b1b1d67067bfb4124a2076ed5bb846a5dd8

SHA256
d9c2aa171614902023edf47d23786219dd1774149755329ed9ae7b819890b013

SHA512
ab9c739d24fc7af775a0a6ffef48042b5b567435a170698827033a22a4e5fb8ca8400efe7ee947f9e3467900c3f757f39f967efbb1de1ba3c9bb64fb456b2e1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1
Filesize
264KB

MD5
4cf04741fdbacc025ac8570fe4564ead

SHA1
09ded4febc45a8754e09b5e569e0fec7854d1351

SHA256
15bb80d6ff762983243b490508cf3cbb06a11301489ef365fd2d3f0e8229189c

SHA512
94361001f6ecfc20a808974ac873372c451ef0bac557054e3cf0a39890d9c78a7fd1170e52bf80ba36f8330fffcc7b6410c1876585cfad6d7baceb3ef1b7fcb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1
Filesize
264KB

MD5
4cf04741fdbacc025ac8570fe4564ead

SHA1
09ded4febc45a8754e09b5e569e0fec7854d1351

SHA256
15bb80d6ff762983243b490508cf3cbb06a11301489ef365fd2d3f0e8229189c

SHA512
94361001f6ecfc20a808974ac873372c451ef0bac557054e3cf0a39890d9c78a7fd1170e52bf80ba36f8330fffcc7b6410c1876585cfad6d7baceb3ef1b7fcb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1792115-ecf0-4240-8b40-01aaa4a341b4.tmp
Filesize
13KB

MD5
f74611f200161a3e9d07c5c039b50dc3

SHA1
18581dd4b1d26351c20c6285dd7e5e024fb88bce

SHA256
f5d27337cb7b5cbb247268f9bf91b4dbf2b3473ca638b42e06edf2c772d47c35

SHA512
3080cd627542e985c13f696d1717bc26f6ee3647e7c5461b1eae306a4a01fa3156508dd949290ef6e9335c6de45c01e68a3412fd52a4834f2e3f2a6c4257dfdc

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
3KB

MD5
806df17c88ef4391a46d2c0cce89d9a9

SHA1
83f736aaec33a4dda40d041da1ef797c4c2154f3

SHA256
94a0f3ca9afe331ec5d6a2bdaa52cd33ac19bf6f467bfd619a64eb8d8686dc3e

SHA512
1ec5e142402a76bfe732b962a744c9bf32ef83066c547c4bd16bfbf3b0b6c4d3f85dd934fb8f9fb3c2ad40986b5ba0a1751942d2656652603151a80eb1fc7a3e

Download Submit
C:\note.txt
Filesize
218B

MD5
afa6955439b8d516721231029fb9ca1b

SHA1
087a043cc123c0c0df2ffadcf8e71e3ac86bbae9

SHA256
8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270

SHA512
5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

Download Submit
\??\pipe\LOCAL\crashpad_5044_LVGLFTVXCBDYICJC
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
\??\pipe\LOCAL\crashpad_5840_LGKDPCBXHVMYXAVR
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/908-1891-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1896-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1890-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1897-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1901-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1902-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1898-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1892-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1899-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download
memory/908-1900-0x00000000059E0000-0x00000000059E1000-memory.dmp

Filesize
4KB

Download