734403a96fad68cb2ef2b340adddd9cadd5894007aac703dcdb4a4cb8326c538

max time kernel
1801s
max time network
1798s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 21:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eeeeeeeeeeeeee/Malware_pack_2/Malware_pack_2/VineMEMZ-Original.exe
Size

39.6MB
MD5

b949ba30eb82cc79eeb7c2d64f483bcb
SHA1

8361089264726bb6cff752b3c137fde6d01f4d80
SHA256

5f6a8f0e85704eb30340a872eec136623e57ab014b4dd165c68dd8cd76143923
SHA512

e2acd4fe7627e55be3e019540269033f65d4954831a732d7a4bd50607260cd2a238832f604fa344f04be9f70e8757a9f2d797de37b440159a16bf3a6359a759b
SSDEEP

786432:1fhwEXgLYTou24XbHzjkgV5bQAH/AbkP1hn0qPQPrhBPC7wYqljbdPIa:dqgb84DPn5vhbIPdZaWljbdPIa

Score

8^/10

bootkit discovery persistence ransomware spyware stealer

Malware Config

Signatures

Modifies Installed Components in the registry 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

tv_enua.exeMSAGENT.EXE

description	ioc	process
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	tv_enua.exe
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	MSAGENT.EXE

Sets file execution options in registry 2 TTPs 14 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

MEMZ.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger = "rekt.exe"	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shutdown.exe	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe\Debugger = "rekt.exe"	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\Debugger = "rekt.exe"	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shutdown.exe\Debugger = "rekt.exe"	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logonui.exe	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logonui.exe\Debugger = "rekt.exe"	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe\Debugger = "rekt.exe"	MEMZ.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe\Debugger = "rekt.exe"	MEMZ.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe	MEMZ.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

VineMEMZ-Original.exeMEMZ.exeCScript.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-513485977-2495024337-1260977654-1000\Control Panel\International\Geo\Nation	VineMEMZ-Original.exe
Key value queried	\REGISTRY\USER\S-1-5-21-513485977-2495024337-1260977654-1000\Control Panel\International\Geo\Nation	MEMZ.exe
Key value queried	\REGISTRY\USER\S-1-5-21-513485977-2495024337-1260977654-1000\Control Panel\International\Geo\Nation	CScript.exe

Deletes itself 1 IoCs

Processes:

Installer.exe

pid process

7312 Installer.exe

Executes dropped EXE 12 IoCs

Processes:

MEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exetree.exeInstaller.exeMSAGENT.EXEtv_enua.exeAgentSvr.exeBonziBDY_35.EXEAgentSvr.exe

pid	process
1220	MEMZ.exe
1864	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
3616	MEMZ.exe
3132	tree.exe
7312	Installer.exe
6484	MSAGENT.EXE
2824	tv_enua.exe
8112	AgentSvr.exe
8108	BonziBDY_35.EXE
7328	AgentSvr.exe

Loads dropped DLL 35 IoCs

Processes:

Installer.exeMSAGENT.EXEtv_enua.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeregsvr32.exeBonziBDY_35.EXEAgentSvr.exe

pid	process
7312	Installer.exe
7312	Installer.exe
6484	MSAGENT.EXE
2824	tv_enua.exe
7200	regsvr32.exe
7044	regsvr32.exe
7044	regsvr32.exe
6200	regsvr32.exe
5680	regsvr32.exe
8076	regsvr32.exe
7400	regsvr32.exe
7700	regsvr32.exe
8084	regsvr32.exe
7616	regsvr32.exe
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
7328	AgentSvr.exe
7328	AgentSvr.exe
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
8108	BonziBDY_35.EXE
7328	AgentSvr.exe
7328	AgentSvr.exe
7328	AgentSvr.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

tree.exetv_enua.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-513485977-2495024337-1260977654-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DesktopXmasTree = "C:\\Users\\Admin\\AppData\\Roaming\\Data\\tree.exe"	tree.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet"	tv_enua.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 8 IoCs

Processes:

Installer.exe

description	ioc	process
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini	Installer.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini	Installer.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1542.003

Processes:

MEMZ.exe

description ioc process

File opened for modification \??\PhysicalDrive0 MEMZ.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	MEMZ.exe

Drops file in System32 directory 3 IoCs

Processes:

tv_enua.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\SETFFB9.tmp	tv_enua.exe
File created	C:\Windows\SysWOW64\SETFFB9.tmp	tv_enua.exe
File opened for modification	C:\Windows\SysWOW64\msvcp50.dll	tv_enua.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

MEMZ.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-513485977-2495024337-1260977654-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Roaming\\Data\\Pussy.png"	MEMZ.exe

Drops file in Windows directory 55 IoCs

Processes:

MSAGENT.EXEtv_enua.exeInstaller.exe

description	ioc	process
File created	C:\Windows\msagent\SETFE66.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\help\SETFE96.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\SETFFB5.tmp	tv_enua.exe
File opened for modification	C:\Windows\fonts\SETFFB7.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SETFE3D.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETFE50.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\intl\Agt0409.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFEA7.tmp	MSAGENT.EXE
File created	C:\Windows\fonts\SETFFB7.tmp	tv_enua.exe
File opened for modification	C:\Windows\INF\SETFFB8.tmp	tv_enua.exe
File created	C:\Windows\msagent\SETFE51.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\intl\SETFEA6.tmp	MSAGENT.EXE
File created	C:\Windows\help\SETFE96.tmp	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SETFFB5.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SETFE66.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgtCtl15.tlb	MSAGENT.EXE
File opened for modification	C:\Windows\fonts\andmoipa.ttf	tv_enua.exe
File opened for modification	C:\Windows\msagent\SETFE4E.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\SETFE55.tmp	MSAGENT.EXE
File created	C:\Windows\INF\SETFE55.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETFEA7.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\tvenuax.dll	tv_enua.exe
File created	C:\Windows\msagent\SETFE52.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFE54.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentSvr.exe	MSAGENT.EXE
File opened for modification	C:\Windows\INF\agtinst.inf	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\mslwvtts.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SETFE4F.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentDp2.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentSR.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SETFE54.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFE50.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFE53.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\help\Agt0409.hlp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\tv_enua.inf	tv_enua.exe
File created	C:\Windows\msagent\SETFE4E.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentMPx.dll	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\help\tv_enua.hlp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentAnm.dll	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\help\SETFFB6.tmp	tv_enua.exe
File created	C:\Windows\MsAgent\chars\Bonzi.acs	Installer.exe
File opened for modification	C:\Windows\msagent\SETFE51.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentDPv.dll	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\SETFFA5.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentCtl.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFE4F.tmp	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SETFFA5.tmp	tv_enua.exe
File created	C:\Windows\lhsp\help\SETFFB6.tmp	tv_enua.exe
File created	C:\Windows\INF\SETFFB8.tmp	tv_enua.exe
File created	C:\Windows\msagent\SETFE3D.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETFE52.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\tv_enua.dll	tv_enua.exe
File created	C:\Windows\msagent\SETFE53.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentPsh.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\intl\SETFEA6.tmp	MSAGENT.EXE

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 64 IoCs

Processes:

BonziBDY_35.EXEregsvr32.exeregsvr32.exeAgentSvr.exeregsvr32.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6B1BE80A-567F-11D1-B652-0060976C699F}\1.1\0\win32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Regicon.ocx"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{065E6FD1-1BF9-11D2-BAE8-00104B9E0792}\3.0\FLAGS	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FDD-1BF9-11D2-BAE8-00104B9E0792}	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0A45DB4B-BD0D-11D2-8D14-00104B9E072A}\TypeLib\Version = "2.0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BF0-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\Version = "2.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BonziBUDDY.clsBBPlayer\Clsid	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSOption.3\CLSID	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B976287-3692-11D0-9B8A-0000C0F04C96}\TypeLib\ = "{065E6FD1-1BF9-11D2-BAE8-00104B9E0792}"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1DAB85C3-803A-11D0-AC63-00C04FD97575}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0A45DB49-BD0D-11D2-8D14-00104B9E072A}\TypeLib	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{95A893C3-543A-11D0-AC45-00C04FD97575}\ = "MSLwvTTS Engine Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B1BE803-567F-11D1-B652-0060976C699F}\Forward	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\Implemented Categories	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E91E27A3-C5AE-11D2-8D1B-00104B9E072A}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6D0ECB27-9968-11D0-AC6E-00C04FD97575}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F5BE8BD1-7DE6-11D0-91FE-00C04FD701A5}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FD2-1BF9-11D2-BAE8-00104B9E0792}\ProxyStubClsid32	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B1BE804-567F-11D1-B652-0060976C699F}\ProgID	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE3-1BF9-11D2-BAE8-00104B9E0792}\InprocServer32\ThreadingModel = "Apartment"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{916694A8-8AD6-11D2-B6FD-0060976C699F}	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B1BE804-567F-11D1-B652-0060976C699F}\Control\	BonziBDY_35.EXE
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{822DB1C0-8879-11D1-9EC6-00C04FD7081F}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B1BE804-567F-11D1-B652-0060976C699F}\VERSION	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A7B93C73-7B81-11D0-AC5F-00C04FD97575}\2.0\0\win32	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ProgCtrl.2\ = "Microsoft ProgressBar Control, version 6.0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDF-1BF9-11D2-BAE8-00104B9E0792}	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CDA1CA00-8B5D-11D0-9BC0-0000C0F04C96}\TypeLib\ = "{0A45DB48-BD0D-11D2-8D14-00104B9E072A}"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BA90C00-3910-11D1-ACB3-00C04FD97575}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{08C75162-3C9C-11D1-91FE-00C04FD701A5}\ = "IAgentNotifySinkEx"	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{57DA7E73-B94F-49A2-9FEF-9F4B40C8E221}\TypeLib\ = "{F4900F5D-055F-11D4-8F9B-00104BA312D6}"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\MiscStatus\ = "0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BonziBUDDY.CCalendarVBPeriods\ = "BonziBUDDY.CCalendarVBPeriods"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00D18159-8466-11D0-AC63-00C04FD97575}\ProxyStubClsid32	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{28E4193C-F276-4568-BCDC-DD15D88FADCC}\TypeLib	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B1BE804-567F-11D1-B652-0060976C699F}\ = "RegistryControl.RegiCon"	BonziBDY_35.EXE
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\InprocServer32	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E91E27A2-C5AE-11D2-8D1B-00104B9E072A}	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A7B93C73-7B81-11D0-AC5F-00C04FD97575}	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A7B93C8B-7B81-11D0-AC5F-00C04FD97575}\ = "IAgentPropertySheet"	AgentSvr.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\ = "IButtons"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CDA1CA02-8B5D-11D0-9BC0-0000C0F04C96}\TypeLib\Version = "2.0"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDF-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\ = "{F5BE8BC2-7DE6-11D0-91FE-00C04FD701A5}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{98BBE491-2EED-11D1-ACAC-00C04FD97575}\TypeLib	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\InprocServer32	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSPanel\CurVer	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{98BBE491-2EED-11D1-ACAC-00C04FD97575}\TypeLib\ = "{A7B93C73-7B81-11D0-AC5F-00C04FD97575}"	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B8F2846E-CE36-11D0-AC83-00C04FD97575}\MiscStatus\ = "0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSCheck.3\ = "SSCheck Control 3.0"	BonziBDY_35.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A45DB4F-BD0D-11D2-8D14-00104B9E072A}\TypeLib	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ActiveTabs.SSTabPanel.2\CLSID\ = "{E91E27A3-C5AE-11D2-8D1B-00104B9E072A}"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FDE-1BF9-11D2-BAE8-00104B9E0792}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	BonziBDY_35.EXE

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

MEMZ.exeMEMZ.exeMEMZ.exe

pid	process
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
4624	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
5056	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe
5056	MEMZ.exe
1864	MEMZ.exe
1864	MEMZ.exe
5056	MEMZ.exe
4624	MEMZ.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

MEMZ.exe

pid process

3616 MEMZ.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs

Processes:

msedge.exe

pid	process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of AdjustPrivilegeToken 17 IoCs

Processes:

AUDIODG.EXEAgentSvr.exesvchost.exe

description	pid	process
Token: 33	4164	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4164	AUDIODG.EXE
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: SeManageVolumePrivilege	7684	svchost.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe
Token: 33	7328	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	7328	AgentSvr.exe

Suspicious use of FindShellTrayWindow 27 IoCs

Processes:

MEMZ.exemsedge.exeAgentSvr.exe

pid	process
3616	MEMZ.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
7328	AgentSvr.exe

Suspicious use of SendNotifyMessage 25 IoCs

Processes:

MEMZ.exemsedge.exe

pid	process
3616	MEMZ.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

MEMZ.exeBonziBDY_35.EXE

pid process

3616 MEMZ.exe
3616 MEMZ.exe
8108 BonziBDY_35.EXE
8108 BonziBDY_35.EXE

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

VineMEMZ-Original.exeMEMZ.exeMEMZ.exemsedge.exe

description	pid	process	target process
PID 1628 wrote to memory of 1220	1628	VineMEMZ-Original.exe	MEMZ.exe
PID 1628 wrote to memory of 1220	1628	VineMEMZ-Original.exe	MEMZ.exe
PID 1628 wrote to memory of 1220	1628	VineMEMZ-Original.exe	MEMZ.exe
PID 1220 wrote to memory of 1864	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 1864	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 1864	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 4624	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 4624	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 4624	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 5056	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 5056	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 5056	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 3616	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 3616	1220	MEMZ.exe	MEMZ.exe
PID 1220 wrote to memory of 3616	1220	MEMZ.exe	MEMZ.exe
PID 3616 wrote to memory of 1788	3616	MEMZ.exe	notepad.exe
PID 3616 wrote to memory of 1788	3616	MEMZ.exe	notepad.exe
PID 3616 wrote to memory of 1788	3616	MEMZ.exe	notepad.exe
PID 3616 wrote to memory of 4760	3616	MEMZ.exe	msedge.exe
PID 3616 wrote to memory of 4760	3616	MEMZ.exe	msedge.exe
PID 4760 wrote to memory of 2248	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2248	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 2368	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 4740	4760	msedge.exe	msedge.exe
PID 4760 wrote to memory of 4740	4760	msedge.exe	msedge.exe

C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\VineMEMZ-Original.exe
"C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\VineMEMZ-Original.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:1628
- C:\Users\Admin\AppData\Roaming\MEMZ.exe
  "C:\Users\Admin\AppData\Roaming\MEMZ.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1220
- - C:\Users\Admin\AppData\Roaming\MEMZ.exe
    /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:1864
- - C:\Users\Admin\AppData\Roaming\MEMZ.exe
    /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:4624
- - C:\Users\Admin\AppData\Roaming\MEMZ.exe
    /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:5056
- - C:\Users\Admin\AppData\Roaming\MEMZ.exe
    /main
    3⤵
    - Sets file execution options in registry
    - Checks computer location settings
    - Executes dropped EXE
    - Writes to the Master Boot Record (MBR)
    - Sets desktop wallpaper using registry
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3616
  - - C:\Windows\SysWOW64\notepad.exe
      "C:\Windows\System32\notepad.exe" \note.txt
      4⤵
      PID:1788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://search.yahoo.com/search;?p=how+to+get+cursormania+in+2016
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:4760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
        5⤵
        
        PID:2368
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
        5⤵
        
        PID:4740
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
        5⤵
        
        PID:2892
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
        5⤵
        
        PID:4136
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
        5⤵
        
        PID:3424
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
        5⤵
        
        PID:2748
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3688 /prefetch:8
        5⤵
        
        PID:3024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3688 /prefetch:8
        5⤵
        
        PID:3516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
        5⤵
        
        PID:2900
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
        5⤵
        
        PID:3464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
        5⤵
        
        PID:2656
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
        5⤵
        
        PID:3052
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
        5⤵
        
        PID:5428
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
        5⤵
        
        PID:5540
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
        5⤵
        
        PID:5852
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
        5⤵
        
        PID:6004
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
        5⤵
        
        PID:6120
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
        5⤵
        
        PID:5648
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1
        5⤵
        
        PID:5756
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2980 /prefetch:1
        5⤵
        
        PID:5212
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1808 /prefetch:8
        5⤵
        
        PID:2344
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6704 /prefetch:8
        5⤵
        
        PID:2304
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
        5⤵
        
        PID:5888
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
        5⤵
        
        PID:5268
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1
        5⤵
        
        PID:5304
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
        5⤵
        
        PID:5388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1
        5⤵
        
        PID:1220
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
        5⤵
        
        PID:1144
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1
        5⤵
        
        PID:6096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7468 /prefetch:1
        5⤵
        
        PID:1720
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7180 /prefetch:1
        5⤵
        
        PID:5148
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1
        5⤵
        
        PID:4276
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7360 /prefetch:1
        5⤵
        
        PID:1684
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
        5⤵
        
        PID:4980
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7840 /prefetch:1
        5⤵
        
        PID:5492
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8064 /prefetch:1
        5⤵
        
        PID:1224
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8004 /prefetch:1
        5⤵
        
        PID:5772
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8152 /prefetch:2
        5⤵
        
        PID:2272
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1368 /prefetch:1
        5⤵
        
        PID:708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7372 /prefetch:1
        5⤵
        
        PID:2220
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
        5⤵
        
        PID:112
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
        5⤵
        
        PID:1276
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8476 /prefetch:1
        5⤵
        
        PID:4688
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1
        5⤵
        
        PID:4008
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8748 /prefetch:1
        5⤵
        
        PID:1896
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8984 /prefetch:1
        5⤵
        
        PID:3484
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9152 /prefetch:1
        5⤵
        
        PID:4116
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8896 /prefetch:1
        5⤵
        
        PID:4836
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7568 /prefetch:1
        5⤵
        
        PID:6556
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9232 /prefetch:1
        5⤵
        
        PID:6660
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9104 /prefetch:1
        5⤵
        
        PID:6928
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9536 /prefetch:1
        5⤵
        
        PID:7020
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9504 /prefetch:1
        5⤵
        
        PID:2784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8424 /prefetch:1
        5⤵
        
        PID:2260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9140 /prefetch:1
        5⤵
        
        PID:7116
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9360 /prefetch:1
        5⤵
        
        PID:7164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9968 /prefetch:1
        5⤵
        
        PID:6412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10028 /prefetch:1
        5⤵
        
        PID:6676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1
        5⤵
        
        PID:7088
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9992 /prefetch:1
        5⤵
        
        PID:7084
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1324 /prefetch:1
        5⤵
        
        PID:6828
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9708 /prefetch:1
        5⤵
        
        PID:5072
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9784 /prefetch:1
        5⤵
        
        PID:1236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10092 /prefetch:1
        5⤵
        
        PID:3304
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10404 /prefetch:1
        5⤵
        
        PID:6924
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10612 /prefetch:1
        5⤵
        
        PID:6588
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10776 /prefetch:1
        5⤵
        
        PID:7476
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10880 /prefetch:1
        5⤵
        
        PID:7560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10900 /prefetch:1
        5⤵
        
        PID:7848
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,11005154434574097047,7583140404845904141,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10332 /prefetch:1
        5⤵
        
        PID:7948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=stanky+danky+maymays
      4⤵
      PID:5360
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5376
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=skrillex+scay+onster+an+nice+sprites+midi
      4⤵
      PID:5172
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=smash+mouth+all+star+midi
      4⤵
      PID:5816
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5812
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=mp3+midi+converter
      4⤵
      PID:4772
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:2844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=pussy+destroyer
      4⤵
      PID:6024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5168
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bad+ass+mafia+toolbar
      4⤵
      PID:5444
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:3852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.youtube.com/results?search_query=tootorals
      4⤵
      PID:6000
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=succ
      4⤵
      PID:4828
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5716
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=is+bonzi+buddy+a+virus
      4⤵
      PID:4060
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe4,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:4192
  - - C:\Users\Admin\AppData\Roaming\Data\tree.exe
      "C:\Users\Admin\AppData\Roaming\Data\tree.exe"
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      PID:3132
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=cortana+is+the+new+bonzi
      4⤵
      PID:5216
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5564
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=john+cena+midi+legit+not+converted
      4⤵
      PID:1180
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=expand+dong
      4⤵
      PID:5828
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:2220
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=myfelix+download
      4⤵
      PID:1316
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=preventon+antivirus+download
      4⤵
      PID:4636
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:5600
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://search.wow.com/search?q=bonzi+buddy+download+free
      4⤵
      PID:6452
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:6468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
      4⤵
      PID:6868
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xd8,0x110,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:6880
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=cool+toolbars
      4⤵
      PID:184
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:6224
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=cat+desktop
      4⤵
      PID:6788
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:7036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://search.wow.com/search?q=limp+bizkit+mp3+download
      4⤵
      PID:6768
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:6356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://ask.com/web?q=smileystoolbar+download
      4⤵
      PID:6420
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:2088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=fuck+bees
      4⤵
      PID:1848
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:2312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=free+midi+download
      4⤵
      PID:6328
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:3196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://search.yahoo.com/search;?p=grand+dad+rom+download
      4⤵
      PID:6700
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:6584
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=animated+christmas+tree+for+desktop
      4⤵
      PID:7408
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:7424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=snow+halation+midi
      4⤵
      PID:7784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86f9646f8,0x7ff86f964708,0x7ff86f964718
        5⤵
        
        PID:7800
  - - C:\Users\Admin\AppData\Roaming\Data\Installer.exe
      "C:\Users\Admin\AppData\Roaming\Data\Installer.exe"
      4⤵
      Deletes itself
      Executes dropped EXE
      Loads dropped DLL
      Drops desktop.ini file(s)
      Drops file in Windows directory
      PID:7312
    - - C:\Windows\SysWOW64\CScript.exe
        
        "C:\Windows\system32\CScript.exe" "C:\Users\Admin\AppData\Local\Temp\Bonzi\run.vbs" //e:vbscript //B //NOLOGO
        5⤵
        Checks computer location settings
        
        PID:8188
      - C:\Users\Admin\AppData\Local\Temp\Runtimes\MSAGENT.EXE
        
        "C:\Users\Admin\AppData\Local\Temp\Runtimes\MSAGENT.EXE" /Q
        6⤵
        Modifies Installed Components in the registry
        Executes dropped EXE
        Loads dropped DLL
        Drops file in Windows directory
        
        PID:6484
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"
        7⤵
        Loads dropped DLL
        Modifies registry class
        
        PID:7200
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"
        7⤵
        Loads dropped DLL
        
        PID:5680
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"
        7⤵
        Loads dropped DLL
        Modifies registry class
        
        PID:8076
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"
        7⤵
        Loads dropped DLL
        
        PID:7400
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"
        7⤵
        Loads dropped DLL
        
        PID:7700
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentSR.dll"
        7⤵
        Loads dropped DLL
        
        PID:8084
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"
        7⤵
        Loads dropped DLL
        
        PID:7616
        
        C:\Windows\msagent\AgentSvr.exe
        
        "C:\Windows\msagent\AgentSvr.exe" /regserver
        7⤵
        Executes dropped EXE
        Modifies registry class
        
        PID:8112
        
        C:\Windows\SysWOW64\grpconv.exe
        
        grpconv.exe -o
        7⤵
        
        PID:636
      - C:\Users\Admin\AppData\Local\Temp\Runtimes\tv_enua.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Runtimes\tv_enua.exe" /Q
        6⤵
        Modifies Installed Components in the registry
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:2824
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll
        7⤵
        Loads dropped DLL
        
        PID:7044
        
        C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll
        7⤵
        Loads dropped DLL
        Modifies registry class
        
        PID:6200
        
        C:\Windows\SysWOW64\grpconv.exe
        
        grpconv.exe -o
        7⤵
        
        PID:2820
  - - C:\Users\Admin\AppData\Local\Temp\BonziBDY_35.EXE
      "C:\Users\Admin\AppData\Local\Temp\BonziBDY_35.EXE"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      Suspicious use of SetWindowsHookEx
      PID:8108

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x504 0x3fc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1308

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2320

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6104

C:\Windows\msagent\AgentSvr.exe
C:\Windows\msagent\AgentSvr.exe -Embedding
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:7328

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
1⤵
PID:6736

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:7684

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
PID:8096

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
1⤵
PID:4020

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.Search_cw5n1h2txyewy
1⤵
PID:7120

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
1⤵
PID:232

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.Search_cw5n1h2txyewy
1⤵
PID:3784

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
1⤵
PID:7268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31d53887-ddb7-46bf-8171-dbcc8bc4705e.tmp

Filesize
2KB

MD5
4938580f85447853c0300cabbed42f26

SHA1
f83029988735c913902fb3d786439db703e7e666

SHA256
f851f26c575bc1b95a78ee231b3fc0913afec5ee66edc85e5229c7e219523c31

SHA512
056aae32977199d22667a11642e9e269f56042ab90163b83b41d6bf437f8e85f4e237e0633ee38a29b67d475292b9b467ad0f5f6804dbaadd7dc38a0a21e912c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5414c209-1044-4589-a539-a58ef4a03d3e.tmp

Filesize
10KB

MD5
65ab31908aab842fdb82776d77d51067

SHA1
6fb61c385ce75dd37b74e3dc78f576fd769ea70c

SHA256
a26bf8e2fb562dfb42c5baa36a4ad70f3c64640cc0e32c806325b414a24b1625

SHA512
d18265e8df98b9394ec8a66d3ad45e81b7d9ba4138f3496f43e5989ab82f0692bf6f0ba99731a8cc1d9f4c5fd1a3cfa22df705d6674bdee73156967b5089ea2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
35KB

MD5
5f8bfe3eb6c1026884c9b0691c0fa144

SHA1
6db923ccd275492834342be6852eb555ff30f021

SHA256
e3200e4af96e58178a89fcd4695ea31ab9b506a9837620d4229c2e30b8132520

SHA512
2add075c9d7c735ac99744c8fc1dc60013e2de3e788436e4303f78da7d2666b8fbf0982e518f2463d0f866b9dee52c7ebeebc2d3e6ebbf6d512d5a443d481b94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
16KB

MD5
53548c87f54abfc4c69fcae6e9768088

SHA1
a145d9ab761b8486eb3b58dcfc0c3eba3a6b8824

SHA256
b795af62efcce9a04ff501675c824345ca8b1117ff424c492570b20156861124

SHA512
ea75917f7d9cc58eddfa847c92a26510dcf303cf0ff7a864d4995a62cdb9e27d6df69e2093ea405605380e9cacfafa910ffdfcb35462e99529019bf377d35ef4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
42KB

MD5
a7c6a9443e888737623fd680ebb09bdf

SHA1
5a2fcb5e706eab9d65efcbe805bc1d2c619fb669

SHA256
b491d77084cfcbf4f79aeff7074c9fed641eca169902315af31be1856de8cf85

SHA512
524edc3ef6eb61715c8414b2ce2d176379d4c00c913f659dfe1d79794936ba87cc2676743e556d438be04010923edf1231a767f89a5749b6771cd51befec414f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
99KB

MD5
e4f0d9099c7ae3b903c48c173990cee1

SHA1
183eeba9982c7f74c345b489a6e95f89d4ae5759

SHA256
d64222674e9e320a815849456ee5b23b1d689d74c596fca9cc199661d061222d

SHA512
573fba44edaf2c71dcf034c83a7c920a1436c520adec98177eb5e154fbde06337d4405cabb9d53aa4bdb02927db4a5da9c0b4bb58e13a728bb69c8e61265c841

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
68KB

MD5
b1fa2d198f9c85377f19067cc486ce60

SHA1
0b61ec35c64f513ac02988cb4786ed7dc0b8ec6a

SHA256
afcffc5ff17424a557fef485be111e35ad788023cbeb863ea6ea70940b0362fb

SHA512
5efa88499d24ed3bbf229cac139f90b2779ba6bf5546743568e2c542e2a0428d7bde751252347bc96d794df903fce4f5a8dd37b91e55ce5c01c22756737a60f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
50KB

MD5
00dd39c24576c4a94c9b2566ea2ab6ec

SHA1
cd82692858ef9a97f7726b70ae229398961112c2

SHA256
98ac38e2d2be48350722ecb6b3d468bcd755e73b71228f400633d258ffa7aabc

SHA512
32ecf29f2d2d6dfc97294cf3b669eca1e0e338c0c5e10899f35a6bfc9c784f320aeed431271224ae9f35d9b895b1efda182d723cb1a1d57b0dccea302db84d43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
29KB

MD5
ffc507ab662c24424f3fcb9e8d2eecf9

SHA1
f447984c038d8ece67915c0492e8610894dbc255

SHA256
0468c9bba7e5bb67ac35bc4f4609a257e6fc542e4faddcb494e285e60e9bf170

SHA512
6cecb73607062e2f7280b2cd0f33c014b1fc5190c34120452bd297001b0ed585dc35a451fda300de6864098896a76006a6577ffcc98fd8c0b0d4ed7f961ebece

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
116KB

MD5
dd5412a4298466ee57cf7d023370de1f

SHA1
db34097542a62a93bc09adab29ae51b62fac6dfe

SHA256
70f85959aa5bcae4523775e076f5650a8ef330925973d36c9bea9f0b7c01987e

SHA512
b27b773adf795f0cb40d6943e9eb28e14338f532c99cd398d1ff9125a6689dc7f3a9ebed3933bd30733f37bb550cf464ff9a16e99cef87e6b29e5782c2519a93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
104KB

MD5
e66dd2567f726904a546a2ef9738eb06

SHA1
4aa632531c1e35964568ebfa776c38f7eeede689

SHA256
e9485c8e4b4a255e582e3cec7d1fd174c435c61f06ce87d2326780aa0ea24760

SHA512
ade2f98380d6cc46f51f8c120befb142db22cb78ace34ccb38506796c233ebb45a5be6a2f568a0bfa4acd79daa12f857b7d563668f63bdd259ea723604cc1d8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
80KB

MD5
6ef4b0454478a1e2ee3ed6c97a775385

SHA1
f11642dc9aed603159a978f244e94fccb54d2247

SHA256
1328e176541519fc0762b7c46364d9ae92c71fd25e595f6adc8a1d9b99d97088

SHA512
cf7986c251b6c40e883effd5206f748eb00891ff36288d777f9927d0c4448d4daedd252cad6983a4ac164f381c8000230325d8fe48d2bde5c72e1ae8ec531f76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
74KB

MD5
54c807d91a0386a95a489bc0ceefb087

SHA1
9d8fbe1b8293db14848a96eeccb9965a5c203c5d

SHA256
a557a944bd69af231ccb6302d3b148c9cf4e97544bd8bbc8a82c8e167a7a5df0

SHA512
120de612a05ab80ef82063cff5633e2fe2aea3d80391569deec602d1f4ebe5513eacdd80bf97ab98fbbf21cdaccf960e16bf212ef16ba83adc58fec1e41836f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
79KB

MD5
c2f8fba7301ec1d7972f8a92b9a1f436

SHA1
29ba9cc3227a2874513c15aa7d98b75a6040f935

SHA256
8c68f3f54edb4b8cd08b35bf59ea0240b36f0546c0518066a5d1d9327ad06311

SHA512
9716cee5c52dfa439bd293fbac30ff2aed466b7be5f5573e5995427ac6dcdb082c8afb417689d32251c5a2336a4e136ad5c48270a971d204e880b10b0cd75c2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
194KB

MD5
f5b4137b040ec6bd884feee514f7c176

SHA1
7897677377a9ced759be35a66fdee34b391ab0ff

SHA256
845aa24ba38524f33f097b0d9bae7d9112b01fa35c443be5ec1f7b0da23513e6

SHA512
813b764a5650e4e3d1574172dd5d6a26f72c0ba5c8af7b0d676c62bc1b245e4563952bf33663bffc02089127b76a67f9977b0a8f18eaef22d9b4aa3abaaa7c40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
24KB

MD5
b82ca47ee5d42100e589bdd94e57936e

SHA1
0dad0cd7d0472248b9b409b02122d13bab513b4c

SHA256
d3c59060e591b3839ec59cad150c0a38a2a2a6ba4cc4dc5530f68be54f14ef1d

SHA512
58840a773a3a6cb0913e6a542934daecaef9c0eeab626446a29a70cd6d063fdb012229ff2ccfa283e3c05bc2a91a7cac331293965264715bdb9020f162dc7383

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
67KB

MD5
88a552e6be1ac3978c49143983276b3a

SHA1
dbf4f4dc62a3da564b1a87b5191dc9a72a9b9423

SHA256
927121d8118a41fa3460b9ad84daeae59ea60dc9607e462b7e1341bea60da8d5

SHA512
125b13be3d209ff5cc12d8f9f12d01d271cd50c2800059241ebb419167c21adfa9d979ff6b8d88052f5d302e98090b7c8ceff4894b397168d8ba6d8a6204fb9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
31KB

MD5
1fddfdab08937ca30e43dc454840c64d

SHA1
25af586ab7462e30465c9306426062b9d10bd058

SHA256
c578d1b5c5f608df3926d2658217ae728beace6455244c0cd9e3e3d15e455013

SHA512
b0f5666b0fed1321f525f72b5950b8c694032160e6e5fe101201f4fda3ea3c04fae226a997f949478a93705c8a2f25e3567eb69e35dd7bb6bff85d4bdc481fb9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
84KB

MD5
74e33b4b54f4d1f3da06ab47c5936a13

SHA1
6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c

SHA256
535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287

SHA512
79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
1.1MB

MD5
60021246cef1f0978983114d1fd51250

SHA1
b4cd22c3fa223376820c53fab738473732a0682e

SHA256
5cf8acb556090e2c26d420340e174d7948ca191e0334ddb1258da8844d4a2f3f

SHA512
ba1395b1814e266915c44e7b72f6f4d3a9528eb60948a1d9a6b501d129dcee6d8fe22125e569a618c25bd89b9128e088b3ba6c0ebcad3804a128f38f0e614b66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
32KB

MD5
bbc7e5859c0d0757b3b1b15e1b11929d

SHA1
59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d

SHA256
851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2

SHA512
f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
75KB

MD5
cf989be758e8dab43e0a5bc0798c71e0

SHA1
97537516ffd3621ffdd0219ede2a0771a9d1e01d

SHA256
beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615

SHA512
f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00c3bf32a3f56f3f_0

Filesize
251B

MD5
2222d7540eb5719ae937a974000b8e44

SHA1
818ab2736f8a3fc970a65b2d6c1793e553ea2ac7

SHA256
9bdca659123fba4fc0d2814dc596552c977fbddf81ede8bdd96a4e3d39140ade

SHA512
55e100e72cdc642213dedc7fb2362ba0c1398a7e52334fd9e2e5a8650846b0aa9e15eb3bdb96dd2de7220614b4269a3ebf7298421639276f331880250b021137

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

Filesize
1KB

MD5
c9648536dda976a05224bd27bc5eb08c

SHA1
e733b4db16e093f95d7c04ba87568b8a4a0e2df5

SHA256
bd2b1528e9a6c17fe2493ef7f35ca15c4a8ca6951fe3ffbda43aafe8910201d4

SHA512
c98ff35a275acb460b91b9cce874cb693f3375dbcae3bb6928f57ea0e0f54c55875286a0ad331369175f02f85dc6c37e1ce636b7b303ef0c1aedf29184090961

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0553e2d0cf444b44_0

Filesize
176KB

MD5
2edf255ab9cd72d2350fecd8d6f708b1

SHA1
8eba428cb05cc6f83d13326c3014dce1c22c50bf

SHA256
b9685f807e85e9fe4593b0de7dd3282507fae2de91aebc16ec10403ca6dc3e93

SHA512
f5035248f1855d41c6a38cd954b7331310300e6cffe2ac00f398b67aae32ce2682f61b668c85d864c0aea8e9b4d793d6c7e99df3925992cf5b16015503d6cfb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

Filesize
14KB

MD5
bd7f3baf77e36c1eb4fc0b36bd209e60

SHA1
31d5456f2c3efb7c2f5f4732453daae7c32cac26

SHA256
520ce703bbe86b78d0779d7f468c82843fc40469d0fde78b8bff81853ab7ae2f

SHA512
45f075ef06721500aafe1dc0426e06a7805417b26cbf73443063648ddaad6d0ee08128a8c9b7e682664d7eca76cbd0da13e808f474ef819be674e84085a5b852

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

Filesize
2KB

MD5
c8bccb66fc8173326d1c59704fa5b102

SHA1
b068d03e38f77a5c64010f49149e949172c0503c

SHA256
835ec5185f929d3050d8c25941f5aed06899291c9e224f921d4a8c24c76cecc5

SHA512
0b13f5f87ce782f737282c7aefefff641e25e39ec450625d518c4889c3205dbd4a35fa00fc238ec7ea97b6363427797dbde7d273cb839ac1c18478121c5988f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0881185dff8cea52_0

Filesize
192KB

MD5
8c2be35cd93f5d4a83d4a85a6db312da

SHA1
ecdd41971a2a8de3005a0bbf3ac8d63050f915fa

SHA256
56ad6251d1f34a06e96f50d2fae34e40d2d8f324c9f3b6ff27f7b6e87939e866

SHA512
b189e1e9bb74bbd234ba31cf449246c8f36182e473df26b3f97dab067435ee5691203f749d5a8b1940c727f85401d91d71c955394247115c337eafb03dd682ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\096fae0c49b6663b_0

Filesize
4KB

MD5
cb4598ecdf71429f3d74280daf926668

SHA1
ae4ee7252186d40603aa1ed4579d169c8e568468

SHA256
f493756b955746f82e700aa50542f6cc188b6af37a4ef7a068b1372bb0524de9

SHA512
9eb22bd89f45a7024f6afe3b59876737ea4277e73086272fe75222d98c6bfebbdd3152c06b81d0d7b49766cb6a8e19e0b748ba9a9a801b56d9afcd769169924a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0c69502fbec28a6c_0

Filesize
433KB

MD5
3520afb4bf24bdb9dd47e46250101e55

SHA1
cd1ec156c78ba2f0e6b82ffbf824cc8f0c638b69

SHA256
5cb9968413d22916d52056f47d81a947072750e0bd170d61b2d50f2a34fae82e

SHA512
d6e7675b87d4177ed211f85740850d1cb67530d6ff9756ffde1ecf7a431a409b6e505a56fa5027130d097ae9c7b2c62904f82f6306e5045e21da06846fc3b709

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ce6240506261827_0

Filesize
2KB

MD5
6daa8e5e7d297894c48fa0f1fdbd17b4

SHA1
6a78e2b97451b6478aa6dbe19d9e483fc90b7a39

SHA256
a2438c78b8426176729eb3ebae4c02e9ddf5160ae32afd021647525023b40031

SHA512
d6ed538bd5c3b89de3de803de8d4555f11c51f6cda1791d68e4632b9dd4fd1e9c97b63f95e8b2d42a26c03f970a981efeb9d1a1ecebb5134feda03e700590ede

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10aa17f431707a90_0

Filesize
40KB

MD5
edba431b4854d88784956dc537c37221

SHA1
395c1b69250290f0662869c6b670eec3ab3c1c37

SHA256
66bfbde9304a7e1dee85f7b6f2822d26289380effc2d35007e09004f9a537e38

SHA512
11d61803a7a8c4f9f5e02b4dc581d259044661bb65988a759ce6f997e036d4caf7d591af8002ad63b0d890f802304422badfd5d9692963b7552b26fb274c66f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\17a27da2af997449_0

Filesize
185KB

MD5
cedc72bfcdfad29f21cf8554fcfd4ed2

SHA1
4561b61f800fa9f5e3628a108743aabe3606f0e5

SHA256
c7c8c7afc9e758838a1c862acc41ea557c9c0d2180f3e8f3f5a31804e7797cf2

SHA512
d8731539f51a577101b47d83792872f2e03a5d256059ef0139e11c54b1fd1b6bb0f26086c90a9cbf3faa95011f0910e93e2829fe5334f051b050911dfbe80712

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\17d8b251486296f0_0

Filesize
273B

MD5
2afb966fbaa28a0f8f04df9ee7dd4d92

SHA1
d38b836a7e47ba0844d8b82082b1ea77480ecd9c

SHA256
b3abe705dd185cbfeb5c048ace4d540f8bf9e3aec09b36622226bb85429721a7

SHA512
6e485513cc3ed7a5c724ada576dbdd6f6d6d5d2523cdbd0e977ef431f4ab622c45ae44c66093c27ace03b0f4226139b5eb633fb1bad6d1928d6a911225ccc26b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1abc3f3045cd585d_0

Filesize
2KB

MD5
0de13b918cc97b171b5bb7daf9ba3227

SHA1
d763d123f8ea6e24b3223160a898d32e3ef82405

SHA256
8f1deff6ea3879de665290dc416aa78e014640b66e69607ad7f1a02f2859d98d

SHA512
7785885d3c46f9e2703f886ebd60e50c18c6b79064c8d279ae6771517ab23c2ea83efc12d6f80665310d002753b65139207e80eccf4abb7e6bf50bf9282d9e9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ac673f66e12ce14_0

Filesize
2KB

MD5
bb9688399a04ca6b9054e1f70b875601

SHA1
d4521f3a974a1c73cfa226ca2b2121f4cd3ebb03

SHA256
4dad003f3f6a227d18f54a1f89bdeb10b7b27278bd4b078ffd4ae87d7560051c

SHA512
d4d138e3247a70d38da473859fb2793389f5c9b7bd3034dd0eab3ec195f0c3b6ae2d35316534da69d943de4051a50ffd20a0d6573561832c79d7085488620a80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1bc53205118b9d5b_0

Filesize
2KB

MD5
126078f908314c9d3aa1ddffc092694f

SHA1
b2a4dd7242c2e1a38aeccaf507a2e2c592b47e65

SHA256
7c1af2a4fad3b3a96529711d57e4497a5ad3f12c8e81a81fcdee02b358dcab4e

SHA512
606dff9714f3fc2db3cf60ada65662bdda0394388c021b3b805749cb07e339779e28b4edff65db6d4e8042137fe0dbf46709cdf95e3e53bd4e3af0727c9a1895

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2094e4566797ec07_0

Filesize
87KB

MD5
2ce2f9d198baa419059bac6de49f150b

SHA1
5fa67db313242b02e8ecc25dfb48c96b3d61df0a

SHA256
74b187e0effdf0aa9b495ed3f5306bdd9a066de766fe19d5918df4c560940e54

SHA512
40057639ab466f9204dc2df5432f2adc7e80306f78b296624d468c8e3d0d143b36471d8d5a06b80506016ee2e3c49ac971ced2d98f208b271b0d5a17049be3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\249f3fd1b1bf9b16_0

Filesize
256B

MD5
b13cea79aa1ff98b3ea599a7b08a723a

SHA1
feadb05eb2d8dc70c31879d2bbaacf6e1602c617

SHA256
6fa4de0ccc275b8e7bf5c1e674d5bd8d032e62edc0aaec9e2e8541148a19d171

SHA512
e88d765b43c952a7ff24a23e2ffbd62caf1bb523c6dfa7b06e1cb02b22cb3e261d42f95ee7f75bba261a5979c7b7a0d2d053ece050ac2cb996fece86d40a01bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
1KB

MD5
777c9838bb8600de011de48474f29d21

SHA1
aa497ad350533d01908f16e405b51e878318673e

SHA256
86117f94264d611f48777a5e0f1b9f74c10ccc2dae352022d2fe8f52bbe9fd0c

SHA512
1a808a02153e42cb9877df98cb6e03f1db0340802f8bf462504b95c8d1276e37d192a17f0a052c79767ca28d60696460fc53bd9d6c7117b7f952c99718da3fc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\28324e9db7b11193_0

Filesize
27KB

MD5
1c7eb67721e187b361c7ff7dd4fdb77d

SHA1
db1417452f477878edba8fee7c00b7a574ecbe02

SHA256
f48ee5bc43881ef12a010ba6c7ce515b7991322b805be9b410b52c9b9de37194

SHA512
7f8dbec423613418035843951ed227ac8e6f373a2fc400c0b5db83c805f8239e2432732f58596e8387bbd105812e7fb738a4076b71a1905262e726de49b5e9a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2a547e6e140fd082_0

Filesize
110KB

MD5
a737dcb85d9fc0621ed96e2a0dc4a518

SHA1
d2b7aa5f87314773cd6d42110b3ed830c32c07a4

SHA256
51d79532ee6e47fa1e30a86e825339316c28988c9d55a567b08b48bca620146a

SHA512
e0bb00f079b72673e825a6f0b0cbc4dcaeea6d06848d9a123c2feb7ba56d94fcaf6e54f9849b79829641c8cf9776fb474052396c0e1b925dbd17c8630ea8318f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ce29dfb4fbfd6fd_0

Filesize
5KB

MD5
22613019e7a0ab2f721aad7ff7a6ac79

SHA1
a125085a78cce0cabdd02fa51abfac4ee0cc42ee

SHA256
9505d59a567e2351114f75434cb09dd0dc9db4ff596ac68a1a7b0fa6fcbf3c93

SHA512
5c5f3e2f9271f793da27cd9d8eb1d4c2a9c93cacb883cfcefd2e4d816acb8066ffd8af3401d0e241a6aac4215d3b967f42df28b71bc3f15b58d9a320ab227ae3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d48a9106aefde63_0

Filesize
10KB

MD5
104b6817f78f6e04734e5aad992c3c84

SHA1
549c14aaf3ed8a8e4c2d016d4135ec120d9ef0e1

SHA256
47cd7c68f50f2b85686840b526d0a1d343be934193ae0545387ed1e75c9ec33e

SHA512
331d0cab0723f0f6f4e815606f0f7a22143bd82beb138119a8a7ac381571a3729b69f8797a6c94038fa56dc8aeec865ad09e446d77282cf3954e75e80ca4b2ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33f0991b0c05bbe0_0

Filesize
2KB

MD5
6cf342530cb76f852e546f24aef40c54

SHA1
de073feffeb073b2db0cc815dd185a1ac09dbfe6

SHA256
1742ca377b04dac00b95e748c3ebd98b49f3e873436f04abc881c9ed14b5e3b4

SHA512
ed48ba08b0ef77be3ae8c7a417ee78a31d300c4f1cbb749287d99bbd31495269310ac7eadd59e5c8b7cc20785014aef8b44428f5a09d89a850a027092b1e8610

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\36bdbbe65fa3970e_0

Filesize
288B

MD5
67282d7c422005dd312e344eea9c0665

SHA1
914ee31e60916a236578256f8df1753ee9ce47cf

SHA256
b9b52f1495e2f41f56840aac67ad274de363a41aedba91d16b3fe978ec1b0565

SHA512
f6dd039cf2c1201bc61d0a01ad43d33f8518dd4dc2e95f45138c0d8346d81b7501dcd57a2c8307b8b0337f54e7d3506e51e92c8bb90583ad377a096be76b1960

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40482311e9d9cc00_0

Filesize
17KB

MD5
6942a9d469cd781605664c463569e8d7

SHA1
9cc2463dff6cb630b6d12f6c1ade3f6340e09537

SHA256
d8605c76032cc00c06e28ab917bc39cc4289501109c76f149522b6f6e3bcdea9

SHA512
93151c28278393347f82f64bf893822257c15f75af978f092ba9965b37a9e43159c1037845122994cb543a1718f5c58a8b61f66d530586118eac3186144b8adf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\41695a91e981466c_0

Filesize
7KB

MD5
c4770faed0b18d0414417a931ce3f811

SHA1
5fade0815cedfb222cc519ebecc115f5acefe2cc

SHA256
cffd4f8c59d8b727334061df60582516011174d61ba5d719ee9972897ffb51ef

SHA512
a484c961417b3b966519d9120a82eea5eab22967f6152eb85d7b952b724820da9d84c246bbd3cf638c1ea393f69671b9389a12c38367a276e92d4ab9f17ff169

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
6df7265ea63350199baacd9966a15684

SHA1
cd673a31765bbd90f4fe774edbdce06979fd48fc

SHA256
c99a1f929b4b71b1b9cfeadac95cf03dbb7d679e32a96e309dbf588cd9740d26

SHA512
ee43cd16d158ecb04c0565977cc2cc892d19cdc8b71c111dbea25eacd749260f80d0ebe42437a7095304eac30ce4d147935f7b1d34dac891636be98f391920a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47130442e621a46e_0

Filesize
13KB

MD5
211c29a84694f4f9fd438113ee0740a2

SHA1
1566254c452bd06010710e307a860219f66a97ed

SHA256
a159899cee40d507aaa102b46cfed1a2269f0cf3f070d212075e1531b6294539

SHA512
84f2cd655ec2bcdab0a09fccd22c74ea5a06bd5ebc5107d75c5d445eb3cf8674cfd44bfbb5ace9a2e21d53402e351e4b65ede6dacb7d220dad1564efa314bde6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

Filesize
262B

MD5
8e96693a9ea471b1a2161363447af6bf

SHA1
a2e30e877545e33688467a08c1748140a20c471f

SHA256
00c5ea6e1d56a71b416aebd607f049f29f32720efe6c5b718e39bc9dd7a9a53e

SHA512
c52ec5623935160b444427c37686fa9e91fd9a1f32c1a40db964a27f7f19ae95d5427a6bc3d72b25e3e37a08521cd4ef839ef14acc4760c202b0899863c562d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

Filesize
1KB

MD5
8ed35ec1cdf733762e4582b3f8917f92

SHA1
7cc9e32cc380859747af02071eb3df6a327425f8

SHA256
866ae03e3dadf6251a933122bf9d63da40b06b47bce244ff80dda3bb41842bf6

SHA512
9d17c9e863dbf011df613fce68203128e8acc0fef0b38b087afe712502c6578d274d5ba514088016bfb6b4203cc3cbc83976100e243d5c114b62d67845cde364

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4bba4335df2c10bc_0

Filesize
421KB

MD5
38947d473cbb88bc18c48d09d678b7fa

SHA1
c1f49b5eb6bd077936ba00a958c75a30b1252cd0

SHA256
dcc79d76f95741743d07038568199c3185d4f10207487c5ea49c8787435c2d63

SHA512
b9283154aa65900bdd968238ac73df1a755fbe37ad34c31ab69b2b0f1112067c4c2a4df7a3b3cf28922d2563d8927adf744200e5109a5b2acd280c0167eeca62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c693273baa0190b_0

Filesize
5KB

MD5
b78f89ddbc1fc1fccffbe818671b3051

SHA1
5413a171cbeda1f298c9be93adb1d87ee08b6772

SHA256
dee8c8a549e4d3e200ba15967fb650ba6d0ce37fd4c79369552ed44b1bac6d36

SHA512
b993788acf00a1ece0214c64cbaa9d5979ca596c80fc95a3fbc4b9418d1ed447d9ab172e0ee89682edb30ee3fce8203e6a3f4426a906741f8c6e796c4bc4f401

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e094f35545842a3_0

Filesize
3KB

MD5
5b5cdf03ce8ad11dc99617e789e5dff8

SHA1
7bf8d9b54dfb918f24e66e2aca1ebc07f32b190c

SHA256
fa182fa590fd109fcda60cf679213cb0263a67b56743a9638d67c96644847853

SHA512
9beac912221c5669db46ff01c1d94dae1a647f819f305cc7527cd4baf12f7784d354caf752f8fa57b8347a446c5eebea3619f31dfac52bd45f253010883f43f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e6742505c79459c_0

Filesize
2KB

MD5
eae5ce82961e40ddf665a753e6848f27

SHA1
8311ecc7d3c0197c5eb2d64c7eed6ac4ab68a695

SHA256
41bd315738439ed14261476d7f70cbc27920698f8a4cf7281ebdcf5a1a6aa618

SHA512
5f81eb657a6426cf7f9e22ff25f83fd98ae2daef8be9ec674dfa820ee2fabd083a0db2c536ddcd979f9cca79aa29ce0531cbeed4ffb7e5478a643917b9085b0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
2KB

MD5
6b712fbe33063a352eac8b9f2664f35c

SHA1
ac03b591a57059b2a669c1e627b3f22cdda39bf2

SHA256
d5493a7e1fbee990a201a177f866d121b9de7cf6788e268a30c2e5e224c70518

SHA512
bb373db228014e8360ee5666de6a483b88ef2221ebfd722143c7356463f02d7eee687defbd2af126c8227ebaa710a92b0c0084260e4e8d9aeb78c4e0483d218c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

Filesize
2KB

MD5
c79315f1c04f01e28909c00f595dce9f

SHA1
2e110accd9f6057ca3359349bc0a34a78ed5cc85

SHA256
689ca0569c78f66d3881d0ca59fcd07ead71c33f3f85d89814982527dc023ff0

SHA512
06006fb0b718777ba030a0f1caef0567a4d0251286de5dfeb778d1156d4c38b7e27fff86d9efbdbc2aefaed71c54324dcd021225d6404e593a62b6294f5e451c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5901cd6815f5b8c7_0

Filesize
10KB

MD5
43684f75c847291fe210ab8f726d819a

SHA1
bda02c375fcc7da0a3b8a05aac9255ac5b81ee44

SHA256
adcf6573b315b34c0b47f1e576a6ab6b3c76f93b27a661b98e2bb92e3132476c

SHA512
2b5b4ca95549e27fc6e8025ed00c3307ad38dd7a3be263a6baf6de506b785a6b16d3f4b519f6cf010e10027617cb97bd4af09e76cbc35c757a42ab162cf39152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5907f8141db99ee6_0

Filesize
1KB

MD5
3898e6d1b3ff8964d2b0a54464ba970e

SHA1
39e9742b7fd3dd3e61fb8c8a04bfb8e2c0208c2a

SHA256
5ce054cbd90565c4d3ecfc92efd34f6796120b61d47e11a4394cb8ec886ca931

SHA512
7589ea62d52f39d7589db0edf62d12a39bd1b289da464dbce3137107c8a7df0b246d179de66d42dcdf602e9f318a81e8e9d0bd118c21f3b0d4809f439ff26fdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a0b10766065f525_0

Filesize
2KB

MD5
0c5bf2febca125ec9df5f5dd6dbfd0b0

SHA1
f9716859070b1d5e840b828680269016cf624aff

SHA256
927bd014e3a140752db2ef764fef160a252bead3e2e96f8650d5cc156f895ed1

SHA512
f1651d93ef7afa2f5026b69a8c14c305c3b6e1b0071043d86a6f8c0234398b570b816e8aceace64317d6977d2abef1a979a85c31e748a620b4bd01a5cbc96947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5ebae3eea1f01edc_0

Filesize
2KB

MD5
ed03302ac6c97e19c70a798444874d47

SHA1
8aee051ecf2933d9325634b5bdd6be9b0f385c5a

SHA256
95ccbc86d0c66337dd8ae3bd105964356c7c3b6aa3e08da73da63aea33f1b7cc

SHA512
29d77795a399dfbf54d0b5afa6dd5353714b13a4a3d313cefc2ef77b9ea9d224033063f9b126091ad120867d1a535e9329bc0ed99bc8552a940dda520aaa1c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\632e260441be7404_0

Filesize
4KB

MD5
debc29689c1e42d9d09dfce4f75cadb2

SHA1
ddf7c0392626099989237a5da49257fe68eb78c4

SHA256
0a1468bf63179220c27bcc87e99137a80b5028d3601fde61c4499f99710c483b

SHA512
5bf4d226e1e4a257ef6c9a1a34f6e05446fed211eee18225328cacc5ecee519ae01bb3a47fa2836335d5dedc71639c5f3312391ccfd4e0df5bedd701223c8d27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

Filesize
1KB

MD5
bb6bfbfff8a231229e0de4d494feec77

SHA1
88b60a0c54bcf245705dd1d85a57f9387187f561

SHA256
8ced20cd46ab2a01915d222dae6f916340f0e1edd1019477ada2bb904a615193

SHA512
df52a1fc87b717edd5e71ef04bb75989a15cdba2cd6fd8afe9e2595d787b66d1fb23bf288dae14cab762a2977989ed24f00ca49a7cffb7a658141a78253272fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63c6995fb9eb98a2_0

Filesize
1KB

MD5
df726e48107b2f4622428ea2eddfb78e

SHA1
a343884167f59dc1c0dcdb34d279261773094cde

SHA256
c8baaea2f3008405c8725b38385406990fa4a8a2943473ce168ab80156235e6a

SHA512
97a90e6ae0271a8791e56e68fa5c001ebd565f0614f771dde2eff26c04bfbbb132c93eb0548adfdc1c121d57451d3f191d29ea9a648b518a74358ccf4c79d7bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\64fa70d4ab69732e_0

Filesize
6KB

MD5
a7dfd1f2c65e6a0b0e098e0bf401ddf8

SHA1
439c9b768b5d30265e37b928d1179992020031ff

SHA256
e8590c33136625ca6f190ccdcafe7d25344fc6c774f2ade05826ce3103e3de84

SHA512
8707f695385ec3eb2d3c3bed9bd831a009a31d18254d8acb556a907e0b0a1a2387b86c3b793fb2957042d48b3c0c8e8f178171a28d768a6dba5d4c7d19092180

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\66cd1c08e89000e1_0

Filesize
5KB

MD5
4f800d09a81b52070554c014f40747fc

SHA1
c3cfad7fafc2d287a7f6c24174acb5b559d15245

SHA256
ae9428cba69ca03dc1ac8d5439f21865ac1e15b6801ffbe2ba90d2f2d44cec03

SHA512
972c0048a4402333d10be0deec1c601028c846953fa038773ac8fbbbac1fbfa89663094f9bed99732e0eec3f8ecd384f1f796c621e2294a44772fe3921277c2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

Filesize
5KB

MD5
ae12ec9353620202cc5d345200965adc

SHA1
baab0a2c28bd782827288d2ea846061d439f2ab8

SHA256
44a030a30b890c257e113b123bb88fa4728555ed0fdefb1cf1773789fc6b8443

SHA512
07d277ecfd8dd3071029ab8682186491359c9eee3f1b2f6e540ce80e95654e2df76eebb0cfc71673320050d1263b3a58758c62d4cff01dc4c83698aab900c1ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

Filesize
1KB

MD5
8368a184a47e3c30c22aa0b8b1e1533e

SHA1
53931f33922f164ca6a27fa04d57d17d663acf30

SHA256
f3759fc06458febfcde206cbfbd983333eebd4535ce98d5430a9d698cf257991

SHA512
7cf5ba6ed016ce301c648ef0c75db301101534bf71caa4afc0bb366ea7b800b17e67dbab9292c5c33799f841de434a76fc66ce2c8b3b4edb41be94282fee80ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\700acc5e7826d4fe_0

Filesize
93KB

MD5
b5b90514d7df14bbdc3af5bc540427f4

SHA1
57741e4e924e2a702c25d84c61e340f05d230975

SHA256
8594c45cf6b8e2fcaa4b3ddfe15edf93449e1471f51fb178b2ea2cbcd0aed76c

SHA512
7f20698c40fd4924de18a4aabc437a1d288fbe0f529cfe43035e367a9a37a5886dbb0399416a102a4adb66cc0edb0a1025ea88e65162c612fd631b600b888f92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

Filesize
2KB

MD5
1fc47cb0e4c3afa66e082afdc26a6e8f

SHA1
44dc843b4ec09ddc66f7141755e868cd9afe2faf

SHA256
be714483ade36e0e139fbc21f2a22465967d2bf0d39825ee74a6f6480d3562f9

SHA512
c992ca082d50c03ee072b49e8e0fb07c2054f246d8d5e45767b0983d00e19162312ba3e529233b7e65e4185c5ea7875b4a67248687491489fea138aa6e243bd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\733a2ebc15407e86_0

Filesize
3KB

MD5
167d60d4425246bf1d5f4ce5fb88c1ca

SHA1
8fe7fe3d32f5e22a20cea1a800018e5b79681847

SHA256
e224f45558360f78c0a202e40ac470d8b7152a9559164e602a5663676c87eeda

SHA512
a74c76e222f6973a91e2eb3234403328a3abfdda2fb19be53c01d2979ab14c13a452f7db4c836c9f508173608f083802b285e9ee2a3d9559f29a2db8c28dc5cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
1KB

MD5
a0f4f9be3643bfd0cbad160ab704bb82

SHA1
031c93ecd294b5b959cb1884f108144a0359af06

SHA256
f164d39074b1d0044413ef7de00e7c0be20af5088f3d3a14e524a1854b0c8636

SHA512
f83b422ff595d5279a943e0d972d10562de37390cd135193c072b26d83a6ec7041eaa3f1f8c2e6cd020e49b424fd37b553111bc898478b7da489519de51cae2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75ffcd5862ddad45_0

Filesize
2KB

MD5
5dae151ef7c34fc479aed2f0c5dffc09

SHA1
d7d6cb95d8a51dea9ca47e8712eb1bd3aa78189b

SHA256
825c8d82e5cb8b7ef9fe33bf48089096e2e8dc5f05bce6f6a5a9bcf4804fd68c

SHA512
ef5cb2f7789fb223b37caa0756a830d2ea2505cffeaedff238ea56ce9ec2a6107c36f3981fdcd5d991ea695017c77f3c025b9c3104a3d6c803a742fa1d4930e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\794417c96d8ffeee_0

Filesize
5KB

MD5
f5060960a6fffa8aba4a717be861e7dc

SHA1
22509d8869341492a627b1ce88e8a754ef697049

SHA256
e9cc5c719cdf1b0ea08ba1646045b719686f377bfe5b2851ff4ac4a83e03ce00

SHA512
e05b66a110c2635e1f40190e45cc9b3043208693582bb59709f4eccfa6d1f1cebb1c130f71c2639f4d15d8e2cdece2ff10c8e17e7651e6a3f63ebf64809a90b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a21145a4f0b9fd0_0

Filesize
289B

MD5
447994bbc10c29206d652b640d987256

SHA1
8ec793008ca424f47842d99c4c183fe5e3444a63

SHA256
543d9fb60e960247043f527950eabcf1a3d9805d7cab48ce4dc1b0bafe1955d1

SHA512
c212106825d7a928c6c348b351fe7d70f1bede7f033500dc0c1f487cf249bd32e0e1da2c88e18df254fe73b2ebf75b87727ddc8aba500d0ac9070ea5dda81c5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

Filesize
9KB

MD5
6b4f62ebae5e7fb18ddeeb439e7f2af5

SHA1
b0661722a8d4b294f734937723d6f9b16c00d17d

SHA256
3957ad5f7e8a0b5d2eaa1b6d11183237db71765cf5b1ceccb7db57f76e7c8a66

SHA512
a974946a593190d0f1bfbbec860f31ab1d18acb97324c6b10ace14a3265fb17988d74b95b687da01c5e00147903e1692c1626d4da395315e94ef300e13b47aa3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

Filesize
1KB

MD5
5074866eabdea174c92d90eb5d05a48b

SHA1
922b033ec01ecd7d8e8dadbf924cd4eb03a0fd76

SHA256
9937d60c1645e0652d655d80288ed065c8bd4bbf7f1c6aaf24c7bf54f856634e

SHA512
9c9e9ca3d93e1031f13ae020b8c6951029321e859ac48153d92097b005b6f51f0e96929324bddb223860ef8f53c24db05614206d482387456f1cd0df4dd05d3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7ed1e65e7e82f721_0

Filesize
279B

MD5
72207292df35f5eef757a377afe7ba3e

SHA1
1b313a4a8b24e6cde6bbc8c22c804a20b439bea4

SHA256
57646a38af459fd24b5d2d9dd1843c061cd8b056d267a67a8d2619279bb0d45e

SHA512
140941a3446b6c7f046fea01cba6e8abd638bdedf86d6c6c6130b7a849ddf46f639fc9518f18a52dd592f028c86a624f7e7b17d36face7116cdc637a5678f1a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\82884474cdfffa61_0

Filesize
175KB

MD5
646645b51caf652aa3bd57145a5952e3

SHA1
34fea8b54aa44af84d135fe8db11fef9d5755c17

SHA256
c98fe66c967d70046173d5d9b206530a374517530a0925c58dc55a193779ebb4

SHA512
412063586d0defc0dc216ccf9865f3df92fd0d4f139239cbd97825c29a1be03d1c9a8469e707cdf4b665809e4fda2d0bb4c9054487e3fc5187ea536c8488bd03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\82b8f9876b6ee7fc_0

Filesize
301B

MD5
a19b1bf471feab0a6e3bc58f2b74d5a2

SHA1
e94fa6d756d6560368c748ece4629d4a7d3b7c7c

SHA256
6b6149a7e3c9f3696de4a5481b3f9a6a8b9ec3bfc3fa9e994afdce7f8eeee22f

SHA512
3c14f2446cf10bd3985b2c7d72854929c1987f5985acf410d46d65af8e3e26f207643acfa0031c6359200680dbc613d9751f46b9c7efd467829346e0f42ffbd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8930ab35b0715fdd_0

Filesize
848B

MD5
b78f062dc7bcd6f07282f6c73d50493f

SHA1
77d60c2df68fc23d1c15995cb3d260d1ac3cc94e

SHA256
82cb0a64e872e3b5a839cb6c4ef25c2c48fa32176d9766498bc7f9277a3bed34

SHA512
dfd0a6aac1ad2620812a874d6a2558e393644bcc88d0976007b2c81f49eddcd6bfa669f928928478a3c055e67103a922cd5ead09d52831625f3411bb1026d574

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8d77ea2666202dac_0

Filesize
24KB

MD5
190ec2e2585e261f60eedd0bba6043bc

SHA1
8087041df24840afaf413d8f4cbd6eb2f6c6bd2a

SHA256
2e32b35c3cc9031c438ffce4303276e76aedaf00e1608968609eb286e5287b1f

SHA512
6a62d2f867c64dddd2733ceba9d20b4296c55e306a0aa84b732d0b7d14196c3bd42e298de5cb54abb8c519facf0dcdb789355c8a12ed54b9705b1f9970d67ebc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

Filesize
1KB

MD5
5375ff9940d9c450fab79bd4398cce54

SHA1
cfbf3aa3cf3cc836e673d77bfd1aa8e620dbc01f

SHA256
87dddc5f4aedacbe3117789d56d7a05388616037a4d41ff338e9784075c4f32c

SHA512
bbab9c7d6940c7327528d1021eb3cd1685dac694ce90298a53cf18ee398f1bee8379f3659e38abef49fec46c230c3305184238a695cfda13459f60af1df011c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e7345417b7a7e2f_0

Filesize
38KB

MD5
77fc6c81f924e2ea6426d924fcb798c3

SHA1
f0d08a686cdd9c6d93d1f85e1f0d506d7c95f37f

SHA256
24345410b1d7cfc04420cc24f50ee8d462318b6e1197c7f84d61a6990ba8c5f3

SHA512
c86ff711971c3289a43dbac9bd80f61421dc97bd272e7863eb56044915f048e3fd07aa2817bb0d2ac426e20c74c2ba1ca12f1a82b82d36aa46899edbf79e0eaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

Filesize
1KB

MD5
0938d2efc3376cf3b10ff70db4ef2e0e

SHA1
86845500722238ec10ac1400e951b9c6d2849646

SHA256
d9bc8661ce40035555c85aa10a27bca7e3ea8b4e2053d0dffe922e031e2896f4

SHA512
e5ed4acf42952b122e14c6b4d13030fa7cc8acdd0dc5a7228f7deb5b1618a66630c20b440b7e69f0d832aba8f093b293ea542129bd2e42ca9e4ce7f7cd8fb2f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\949e6e048541aa58_0

Filesize
1KB

MD5
2749c2fe4e88fb9214a6ca5e3c95130e

SHA1
f050c6ace6b19573309f171c0a998a0ffe402812

SHA256
acd6d7216ef50d1d730250ac20650ac222dce9af3d6bb5026ef5a31e057318a2

SHA512
05198bb9f5f0781de3206ba216f1972745f9dc0dd94c0f67e42c8638e44d5ca9d8507864b9067bbdcd7145e35ff57a79e907da4d0307c24b7c8f6923e0431b10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

Filesize
7KB

MD5
35032bd57431fbba39ef1bfb589f88c0

SHA1
7c5da8528e78d76be53d14c259e23fde950ccd21

SHA256
6c83a6b4ecf02e991e288107e3a91ba8576cdc84147ffee5a48002528d8cf927

SHA512
8f212fc875560323f28ba4f6d8a0fe36a3f828d7d9aff28004337974a68cd402c167b1231d6af87e88a3b4d3234ea9948f4c69b55f6912d9962279a172635329

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94f0f0f43e1c4736_0

Filesize
4.0MB

MD5
54bae3895ec8f33f83a1d30a3d0e22a9

SHA1
a002c0b360c5617aa3ec2ff23e0558010976319c

SHA256
bf7dce44dcbedb16bcbacc214c869ba532f62c190df04d117c6afa3bd3ae7b28

SHA512
9c21b769d2eaaf9d7397f17e1191750fb13b973a853a562461f27728e2b974d168ec1ac7ac60d16f002b991510bdb0599a1f2cac08e1d7f48693fa85d7a2c1d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99110e9a19c3c06d_0

Filesize
4KB

MD5
b60422b4497634031e4c95349659943c

SHA1
04f4177106fc452440370d047bccbe02ab931971

SHA256
8c2e3c335b3393f407660d00a815b14f63c1ab6f9c7cf10dc7bfd9b4ee498232

SHA512
9910d092368340304b9b117cfe495e8494315c35675841b86e6e99468de799d6053b805377d2ebcfdd4a4eadfd39b75efd47081f808bcd40baeb556b3b410596

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

Filesize
2KB

MD5
e7fbd4c318e4b1639218e9eb69dd59c8

SHA1
4804068ded1e21b63161a31c5c9107d73e1fecfe

SHA256
f0040c0b91edcf375731398f7bfbc432cbfa1afb0c53997b995ed6a375dc8337

SHA512
f535b9b67661dec726d1c662a5610811d9dc3443dfc4ed0079950f49582d7e9b782325be3c80f7e6aaa45f2e2b661a87b6380c88aef10a90da21b2a4d3f3b4e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9eb49b832d016644_0

Filesize
262B

MD5
39926eb580270da07bbf9c9b96870ae8

SHA1
277fc5910d44a3d965c07e7187b2845c4f949127

SHA256
97120547326924486ad79c428ca8557e6964552fcfc8005691ba771800ef7920

SHA512
3f9e0c0ad20d0846099791e9b0c0d40693ec660613b046c822ea5c311d197f7e47394f808e487e3e1d65b37f4f28d2b3248741a040cf4dd00c9d9d44c152ef63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

Filesize
47KB

MD5
659083e1892ec9866ca676b02e6a9d25

SHA1
811cb09cddd432e15448d15266e804e793382c18

SHA256
64db1a7592cddc6f5a54ce29e4e9ccce8ab7d5151719e9b64f31f68b27311413

SHA512
3536e83d9633544ceb9ef024631ff764c43cbad28f9f458de26324a18154aeef9576cc4f92ac8c4f5a1ecafe8ed31f572d71629faace1385a05d414cefdf57ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a0bf23602ca1ab29_0

Filesize
6KB

MD5
6aff9448187c121ffa982b4b23b32c92

SHA1
c3b16f7d317d2548a9d3770b0025f82c5db51f16

SHA256
24a13e3feeff7561266ed8ec554d974306fad7dc5726f7b3f16cefe3efeab75c

SHA512
8f6cec7ae957c7896e81e2f855c5603ade0f962237f4f5748f4a05a77ad48f603fa3e33ea0c15ba048ae0ed7f5091026fbb088cdf33013415718e286b94af303

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2638dbe8fb44c78_0

Filesize
317KB

MD5
de96b89c4ad319bc65daa288dd3fa39f

SHA1
c568098238a424dc92e275e2a673b96a2b9a4dd5

SHA256
707800baac8bf0a89518365eb36851cef657b9080f62785232bb981e8c25f9f2

SHA512
2c787fce76c790d84eec9f748b96bfe3225afdbd736a901b4c53172c09a145068ab160580a09d6418b19bab58825ce155e802674385c296cecafadd98ce61cce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a37ad9a49149528a_0

Filesize
6KB

MD5
3b6deeb381a8331b35435e8330f3a3d8

SHA1
ccaac630e2e62768d0f2d40261013269063b0430

SHA256
d651652e21596892d71144acbdf055658c8b8d7e8d9343752761a959c017f20e

SHA512
b7fc0cf6e6caaac17ed772fdabd2722e43fddc8df063aa4b6352becb173f7f504524163e9155c873188bf94c14e9a43f1bf326d8eac83cb39ccaa2a7217ca837

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a385cca6b2e89c1a_0

Filesize
950B

MD5
0d0b2c466e94b6e030f1d2bdf4f5d9f5

SHA1
c1edfcaeef82ab2b732f275bc9d6b35af3272d01

SHA256
8a991ae4541e20a307d255a77693bcc7dfdd12c6e863814a34e431871c1d8200

SHA512
bfe7f78fe384be26281795afc440e342a0c91e74e77ca2f5a10b5efd7a7256229d998262617c153e465a137c1d67e55a13e046fc5d7a54e326c453cd47e13d2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a5bcb0b74ab3f11f_0

Filesize
1KB

MD5
99c08902436fa79204730ddcfbfdd02a

SHA1
ba79976a63b464aac0736746246f8486ad362338

SHA256
080d0a25c4ea4bf37712e6e7ee8b3f3005d8dd3779b26d40674178700c758430

SHA512
f7c59bcc0c9d190fc18ca11cc2c60b778a2b7be18a779a3914d41e7254c2006b8beec6fa2fd80bee7f21f8a89f51c63010b8dcb826f5e9848632257ecfef71b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

Filesize
1KB

MD5
0f906ddd2edc2ee9acc0f19ea6e0b6fd

SHA1
2c2bdd2e129dba181a159fa26994894bada3b32d

SHA256
0ae94f4e753a96775cee1ef9e26ef94b7b6823e3d693ed617de1529567cd489c

SHA512
339973063bb888865c8777428e0c1078a4725e4b6f25e0b0709b078c9d43143b41e0c21e6581054833ee889b8a7a180fc6ba8c05456689be483ed91cb11be71d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af31ca5d9b79bca8_0

Filesize
3KB

MD5
07cedf475d07ba021418a3302cf5a508

SHA1
45fc9ac5280ac99ba21f30645dd215fd69979a0b

SHA256
4fb703f0aa70f9c6561dbf3c90284d820dd2f186a97ecfdcc77f62491f8eda98

SHA512
ebe8cf08d0659d8732253f0187c9db78243a649e0a6063b5948bf0176fc2d081572deb250dcf1b8f8ed951705e44c54b59ea1093797fc12444782f2565b8b75e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af48edbd3578ee3b_0

Filesize
2KB

MD5
2ad8fe657fc053d470b0cc366c741ef2

SHA1
5149cc2b48bf4e6ad34d7927f428cfc8f2b11830

SHA256
09ed6be3571fe52e234e90aa1b7ab69d7118ca520477bc5823c3ce580bbd84f7

SHA512
be780fd6201fa128aeef14a8c9c01439b0d21279d2f2a1daa302c1497ee78e9e0c8010294ebcfc3ddf1203b34730affdb1b34d80ce9990794c422031fe709d51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b54135b7ba035fe4_0

Filesize
17KB

MD5
d2f9b979b8dcd9faadc372190811488c

SHA1
f242f47b4c8a1c5d1ca9b8003f6c9a269680098d

SHA256
de6bcb26d409169447112cf7ce9581530cd0333d553035d07422d74854b03b1d

SHA512
9912ba5a225482b26a9480b3f10fef325436ee6a9900fa0fb8d7223b042d4cde8a15db636cf3e9bb531d512b93e05f9110cd77ce79f6f72266e6f4366f05c98e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bcf3954c5bb22f7f_0

Filesize
3KB

MD5
6412c284dacc031c526682974408a5c4

SHA1
b8a179e1687bfa0869945caf339384a2a7b3da65

SHA256
b850e5a8bad0fc0767840e77cc5bf9765c7d347e063ef5e69b91134147f2ac18

SHA512
3ca27a2dd8e3ef8ad498106bf8ec978abb20a17ed3058340afa7be866ece1a9b3f576a78e927869d2f166f6e36c263f826e0201751b073edd0335b2a88e5cd27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be01b9c796ffddcb_0

Filesize
64KB

MD5
4abe13e7403a4c9bd63f4e0cdc633f34

SHA1
fa238aa9c6a267b8691696124c000e71fd13f924

SHA256
32cb913cd4ae57c0fe3a8b0f65fb7875f26b7728a33be9e9ffcacd9a49f40625

SHA512
37dc0e6cba7ac8d1532affd297572cd77aef9cac9209daf352cde3450ac38d4b6f1c77535870bb821733191ddca54b816c876ac6733e26abf2bb297468810609

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c37dfb5671a046f1_0

Filesize
2KB

MD5
025a5e498f5f346f8dfbda0047a8b637

SHA1
22a7c733e027858f68143de74e2a6e7a1f2e439d

SHA256
17fdb6ccc151bcc21f0694924812731ade8970949ad16943c7e733b9128421e7

SHA512
9c9251096a76851879a9d357c1cde547e32272e085d75593b978339bd1eb6aebba803e809beddd8de27357df6aeea9e14f2d44ff759a8bb669a80ccfb7ecafb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c3f052e9e504bdf5_0

Filesize
252B

MD5
76e8de708d2b89cd04b4762c18c59098

SHA1
ef03a0bb8d6d292743e8d381ca89b139660c80fd

SHA256
05d8da655ee01453cde1c40e4b941de3e15e715668b4be1ed0e4eb39015a5677

SHA512
86d7c93ed6042bacdb9af845671dc88e75987d66c086313527543238c5d8aec11ed082a59c4ca7a63ec0a5457a9d6d86ead4601864913a88f6c860965e3c2215

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c4c7bc994ddf2ed1_0

Filesize
1KB

MD5
591c25b6fcee3d2aa91f34db17c79ba5

SHA1
4c1559b4f21f631e732da9e099e2154d45aa908a

SHA256
d12a1fc8bcd25f335773bf2addd817df3d1bd77ad44aa8f35839a5fdbd98ffe0

SHA512
ca782c4a7eceaa6a55b78ced5f627af3fe49244b29697138f07f83aae6ddd4791f39434a1df8ef2689b20e403c24e01069d0cea6f284aebd6a1eec041fe8a789

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c58f246a73305913_0

Filesize
256B

MD5
433a5e7cb0e7c73653952383416f9b11

SHA1
a571e3f7a854ed47e2809c79f6fc1db8792c4c30

SHA256
dd69387c9e0e52b80bb32f3a4e17d89ac32cc865adc5a9309f5b419a6e570a7c

SHA512
d5a3eb7ce27bd901a223bc1137d732f7a9c79652e6b9346efca378921b19de92d6fe025666f4eddf096cc717301dd538b28bb20ab4774ca63850ef5191d050ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c61a1084b3dde919_0

Filesize
249B

MD5
cc56adb6cf4717599b1fcefe11dc7037

SHA1
65eb20a3757f1d1a65778e9ab1965142718d6c48

SHA256
9d173bd6a781748ad35ecc40cf9a3aa2403103bfe896e6b1ab8c154495ea2b6f

SHA512
a14152a7aa6e2725283e12a3f38e528d54d4d98a707340f041e48eb250ba6bc18b7e58392eb9fc9ea27156a85932badcfb32ad4340720614579d1c2b49370f2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c807b8e9088e4030_0

Filesize
26KB

MD5
af6443df802b575aa0fb406cbac7f043

SHA1
cd039d3c964671500307b84ab41d37d10e75d74e

SHA256
49a46b120afde573b3dda52058ff6cc383e98df7d035efad563aa09c7fe4fee4

SHA512
261d5661b6cc56ddf3732e1433c006bc228eda8861c419feeb58e8b150fc67f52616498b570c5e41a4a22234841c6bb4e9a1e0575ae22c252a390cb23e577e1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c8159bc699e5fd1b_0

Filesize
180KB

MD5
91f87de1ed8979e873ed34fcf734e4e4

SHA1
0d82c5ce2f22ca0092ccafbf76ee35cd5a1b6a50

SHA256
ae7cf1a84ae09a492207b5e8a3fdb203ce06cd4cfe10cec43e20dfa2204b0772

SHA512
e341ffc092f1daa218061d65c89068f74ab45516ee780ca88e65a8c2d4da51564288c8dbb160b53f9467a44a437fe499ed302f9749a015a6ef6fbb396b28489e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c8663d2ec3a7fc18_0

Filesize
307KB

MD5
30673ad2f66bc9cdb4b5120b75e22fc7

SHA1
bbe3157deb397917a6a8d51343ebeb2d74a3c6ec

SHA256
bb655affc65ce1b0897a00e4d979856409ab3461c4ac2bc056c32215c3dba8c4

SHA512
cb4d23b7063d62b6be4e9fbf0144eb2db450becfae250bdf62ef705a145fc4b7a8c3bcbfcd56263cf74921ef42c2e39f31c42b3f96f4628d3e321e0ad3406564

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cca6dff0f171f457_0

Filesize
26KB

MD5
684050a2c47927979774c2f0834ea1b1

SHA1
1d340bf86c552171cd91252cc7793c4e46902537

SHA256
4768aa0b3770e2f13729892978334fc4aab2b9f7d30b688e67c52a41660bc30d

SHA512
73baeb5e6b78c27543121e8b6cc9a8a4a0a90ef84b3b9a97dbd2a7afc10059e9e46ab8d0fa74e46a8ca8e23d529addaefcf0701bb376d4747d42d2810d99f5ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3c0a5ae700555e6_0

Filesize
262B

MD5
07a9bbbdab9b192e828649a3ac593c72

SHA1
9736c912dd56915db67f4f62a81290502cd2e0d6

SHA256
6bc577cbe5da023b6e59221b7fad0752d0dfba366078d3f21ed2f24614ab075a

SHA512
f75b04eca3c6fb707d5d9469ca75caeeeb3a6af3456bd6eae5c5f41c1a706e406b5d9c67059e3a430cde66edd4c8fd06c544817296b549d49e3db33146cf767a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

Filesize
262B

MD5
e10cdedb2b454176881f4b107e036c91

SHA1
3fcfcfe03548a1cda17d770a8fb0fcd7b7f1ecea

SHA256
8cb8fea3301be581498b70a3a3aefa34549caad98e43b2a3039cc2411913c8a1

SHA512
57790e8400c4dfcbceefb835da2ff8fa86c96a56d8ca707fa68846328f42e83154948f1cfd8ef87194a63ef20705ba578212cb2f36e59421683260abfeecf677

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d700e0dae9d4f8c9_0

Filesize
3KB

MD5
6b6a7e4b5c9c34ef28209a0b21c15442

SHA1
f345b0ea2386813c31ea72a769e96ba5c2e7a141

SHA256
eddefe6e8766d03f36347857669ea286a2eaad18f9e3cd79ba58a43c53914acf

SHA512
e52c67be069ff0503afd473749d7d855ff880d7760922d78ea2337c925e96c84ab20f8d03b7397174c16646ecb97a2f3d642605d433f2084ac1274ccc50083d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

Filesize
262B

MD5
9fb7abf4e5d785ccdcefde2abe4f02a4

SHA1
f22f8ca21167b790ad497f57ba8db4ff7aff839d

SHA256
68dd0a4aac5f9df91d0962d6bc5cfddfb38ae5c9047ea106a94f5ebce6e8156d

SHA512
a61c025c8e77ee1bb3801178e22383c6ec81b949f1f74af20f5382a2cfa9521f8039cacf014dd029a639fbe0722cd4b1944176215f9ac42800270ae0f2a70e49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d86829ee97a8a592_0

Filesize
6KB

MD5
f5f2bff67746903ce29160a2d496ecf2

SHA1
558f14c3fe190efa5a113d49b2a9b12bed30ef82

SHA256
cca28287c60830675361799e00b098d6d0237919d51a9ca0354530195aa65720

SHA512
d6e6c38022888d6c4c3b2fc92be98ed2574d51487a0db316c0fb77ada94114429b1532a1d9a2466ef342a779fc820929de5e7ecb28b1a6867ccdcdd9ab0afe26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d929af8c8ab0a935_0

Filesize
70KB

MD5
928a212c2fe07d6a06445af3c6ad0651

SHA1
16c64ab96d8603d270b5d4ef1db85f1b16ea16f4

SHA256
638c12917f0921f1fd940025b9cb2f74f7a29692d11f35089ed853579dea8ede

SHA512
dfd099f8799e49a96d89ca1e50e863a8b6077fb8ba96afe67051484fe3528b7579d92c833b5ad4f6a2318d0931f3e78c7df0ec1451d6f4656af365fe3224afd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

Filesize
2KB

MD5
ac09a73e1d4082dffd7854af242d045e

SHA1
b1fb405fec88498929ab325c0a5aecf5924f0f08

SHA256
1649f18af5518d0db72d2aa9a38f88fb5ae2a9e53d9540c632f0de0af975cb72

SHA512
1ce2080b02eadc26d0dd05d1de22f349dfb3f29e798e6878dd9d22b5499b56ae0f8bd4c7ea19bdf88c57a5525197e3d344959e0e529c405a75db1bf138f04612

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfecdb17649723b4_0

Filesize
14KB

MD5
45eed6ba3c8bd665e1e94e2b89e21dcc

SHA1
693138c6042d192801549bba5b91abb892c8b3d9

SHA256
1c8b1c8fb1e3bd0976b53caf461a64426e382b806df91603e3dcf475cdeea14d

SHA512
7a88e56fb476987a7fd47610d1ecd558cec65c88c4b7f3a6d9d9ba52d3834098083ca058f7d943dc469d49ccbe4e068bdb5196c7a1c1456f73e69f5faebd2561

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e00a65c9b05dec9c_0

Filesize
397KB

MD5
15bdf802d64668da9853ba47ef612525

SHA1
9b08a98b43d4b31ce4bfb69ce9f95811de6a7fdb

SHA256
d52dbd8ba9554e5674d8dd5f0a7fa4297eabfb4123df1bea3c8cfee95d51f8a7

SHA512
dee0dd2e546a75263518aec355fc9256bf5e21d8c7d18eabf354d7bb43ebd6976f524f295d39240c80fc5169a516082dcef3cb91df56460bd51bf4a4d1b1c5b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e02149d135769858_0

Filesize
2KB

MD5
326c6c24f88a9608323e121cf1bef6ce

SHA1
5863479d89a3142448e89ce522a7738b3425243e

SHA256
fe58549a5cf485758f2f54a76f70f020583288c5d1f38617424a19b02df68ed1

SHA512
0c149bb2d3667febd684d1234c6390beba4e617314b838a4dd7ff57a2e4728bac30d5c4ef9e5857f4f4d6cf5b3936d85c81654e7a752f524ebcb5a9383ac36a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3d18be5d494e38e_0

Filesize
2KB

MD5
174e6d9852178bdf9136026484d63c35

SHA1
e967e0f1c69a9283cfe57731fa33ba60452b9d5e

SHA256
ff256ac0dca35c00191d797a9e8ee8096c5a65afdf695798f6e1a07bb753db55

SHA512
2f6dfdff047e9739d02dfa9cbaf3ff0476d090afbe95bd6520d0c642ed71352400f954ef381c9271f436a3d4781dbf9b41427f39649643dbacbfe5533bd5d9a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e52ae3fb759a78f0_0

Filesize
262B

MD5
6453fe3c493268b08e9878e36ab6d195

SHA1
53166046bffabbb5b3f0354c1274331fd1808311

SHA256
e211addaa0dd48481441a2953034c2a2e2cd36aa042f28c849412f409a2b53bf

SHA512
9c2a0efcba6ece843fe07e18047398deeb3ba7ff02297ddae212eb75bdfe3cd70582532af54c16f2413a830dfa3a639805e4c1496c200d3c5f8c3578e1b3dfa3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

Filesize
2KB

MD5
73ca214c1d991dc399b12c507f0794bf

SHA1
d85f94479aa754b70af52194a78d050eff848877

SHA256
d7e99faed221cc5a092de4939f8edcf5d475678f2dbd34112aa76d6ae341f251

SHA512
0f8f33ba222e9ee5c945b42cfd4b985a173241c9572d2f51bed1a3f08f28083090b8bba67b540c705e4e576a22a0e3ecc0061a6e5abf81510181dc95331c0a8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8fe79282d8b05bf_0

Filesize
271B

MD5
1c20801e9e0df2aad7936cef6614f039

SHA1
f1b07439ec119e05b330e7f5e1c28c35fd95e915

SHA256
76bda2132d4a0cf1aeac5b63d4bee79006ea493801f63c4551788602e80c286f

SHA512
a90386e8dd235affe7ab3f66148bcf7a815ad3574493e4d1fdca02d386be1d82c4f26df5a27bf6923686f19f40c49d9aab347c92674c554afb53618cb8a8eef5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eba480d51478bcc8_0

Filesize
6KB

MD5
9a8ae81155292ba9eb34315f9b213209

SHA1
38179b9a319041bc6ed8c8bf788c6bda3fd99a05

SHA256
1849bfd50824c5fb4fd0a636b02250839fb7aebc37d08bf71e7937e070c261d6

SHA512
397d0d7383933d95757feed93b0c29121097e48d025fb449e3b0cf9548d629c0c110c7f237bef3c3e98521098772a6a37369e54d1211881a2d33be3823126532

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eed53af92bbd684e_0

Filesize
3KB

MD5
fb2e40e8ac41711638fbe088dd18eb57

SHA1
abdebad346f0dd2c95ad5eda1d2db7412bb95de1

SHA256
e0a07ce703a754982835d7ad721365feca77c062de2a409345a6ad2c2770be0e

SHA512
def63afa6e1d8f296196d4e573c26fe34ec13f91ca4ae600916c28330573a9f827ba5f77d94bda1bca62bc25f425761e82949a35551690599597ba9b9ac3e643

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

Filesize
2KB

MD5
a248c380179b692d2ab5b7388278f07d

SHA1
07496bad37ee5abb4641e02a630ff6994681df29

SHA256
a7afee6bdf153573b19195c7a37de6d3eff6eac79533cfeb40a5be33a9784f94

SHA512
f8089bfc7dfa083ba2e71292dc17b4dcd1aad8fcbb427b08cc53d0540f9c6f2d4cb37aaaaa8003a03825415ddbed4ab1f3d8e1700c0df20c6344edbd52930d66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2b84b39e04856db_0

Filesize
289KB

MD5
7a37902f0d41bbd9e8e80d992d2d76f9

SHA1
cb653eb42b4ef06aad23d1039937c75a375f25e5

SHA256
77bef7f3ed447d55c6cce62b33911cdce7ff62806eed1ccf2e0d330fa36f0281

SHA512
6325f34fa1ce24dfe9a0b5b6ed8c4756c9f779865611cb5c191a213b6a460fbfc41a36503c1226136231bfe8510b365700d5e22b2248b2c1fcf6bcdbce97f56a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

Filesize
3KB

MD5
54dc61f33d24e177216f20b8c92503db

SHA1
3a9a70344fda6d63083898e795a28956f891b807

SHA256
33932799cadad56e53b27bea45d55c437cf86d083cbf5dd11b6fd17707eb2b83

SHA512
2761d7822a6d4af2493b4bf9b4cfac3183d4e3b489f93402750cd4936852c5333a91cb279790ad24a3848a53345f5b504f1077763a050265fb524bb8b9590437

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
21af8d5cebeae956000ddac888ab3cf2

SHA1
6faa55f1b32adbd658727ab0bd9430542d6c5f38

SHA256
6e38fa5e22035af30c471cb9ba070ff7b7c2a3c3cf1f95338e6ac9bbe1998196

SHA512
1fc1d12ace373863fc20b846937d61d8e087538986ea298984ca4e64c376e57dc1c1fe0dece44765f70c0b48b36bd77420f35d50e6dc602412caad417866285b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.ask.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
122d85bd2e47daaec8bc5517558b5a39

SHA1
7b99105ff07f1f11daa40600987bcc46cca9772a

SHA256
74b2217abd7abceb96a3ef59a70315dc6b0ff77ccd9c77811b6127e6f55adb32

SHA512
7c2da1a68a477ddff92b4c0accd016b976c8ae7200cac16611f4e5bd16bfcb15776aff496ffe8346b5237a8cfa5cce7d5d0f2b8ed5c5ef16b538e8b1d6bdba84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
3db91d5386e8ffad34f124aeef9a1bdd

SHA1
5a7f76d043ce04836ef65510ad37b7d50abfeffe

SHA256
0dfee4120a6832be553b1d5dd2e563f65a6b7116e9c80e40374779ddec171b32

SHA512
4bb6e8e5ebb23ae9f3e8ace5fff6499127bb36bd4de8b8565cedb963fedefe3dded06bec86b4ea61a566e295731101e6a255a3dfb769a4447ab543b326f0f336

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
8cb40fb52322ee0d208c83eac46bd5b0

SHA1
5392f1446690839c91b69b3d8e352a4e70c8cddb

SHA256
d2d49552ca8dc1e0bdff2afe9e5c4c9efb2c163cc2b4b03861f225644875c6f5

SHA512
5b22ce6f1e8aa4cbda0aad85d8489cf212eb1c494565415092c490b6938935d2543ac78a174d74b8c5d8a80030c4b9b66c1fc5e5848171ace7990a7c0b3dcd78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
9bad6019804288e2d75cd05755e1bad8

SHA1
a639eafcbbcbc3173b91203f8c124f7e458eb725

SHA256
fe400c15f71e468f7cb74ba2043e7f7c84a9a60f72b802297e84293657c25fb8

SHA512
f39fea6c5a54ea37ff5a10811656a7fae7784581a81d9f8b0e90cf20a31522b46f4ff39dc78913f0ac8c7ce98aba4b1b477796680398186a638bfa02a6ab002c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State~RFe5eea10.TMP

Filesize
6KB

MD5
06018d625f3515874618b90a537fe877

SHA1
83ba764fbab3e5ccae4f216ca95081cdf0e69d34

SHA256
fe85fde71c57158d8e7bd6d8755e182b9ce2d84112f53c91906ab732ff813f78

SHA512
8d415ec711e7ebe585583313e1cf1af46c92f69623f5e616620313d89f90ae005e29ccdc41d424ce142ae198e21a04bd75b62760f16a0b425c4abd6cc471d161

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
4cf31e5fbf7eaa593e22ae7658cbfd61

SHA1
a4a559498ce7c2c5db652e49dc591fcecd870253

SHA256
be73d061433934015dbc11ed55e6ddfe4d242ec634996cca828f02b65a53e8ff

SHA512
02d6208bb86f0beae253785e6a51d6216e405ebeeb2859a0e1559aea2dfbce24b3954a4d47e436c767438da7cca422591d349cf4d0c92d594c2db087eb00217c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
dd8251af7aa8cce07148ac952c69bf13

SHA1
18f645e4b067e5808a4bf4596552643126df458f

SHA256
44929db65174794e83fa827366ee9c99b3209c98cc0003394f5883e90443163e

SHA512
883d1dbb191acd0add73960c8054e7b6aa7735aab1c1624188e49c80af9ac86b80093c00277f4449a2bb0b5ad6e9eb99c14c53acb5000e1752d830d0147be257

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
d94e893256bac31e40e59904abf90d53

SHA1
f58ec4e86f5a60e43a8dcf2ea5791ea281aa02de

SHA256
5e2de2866001a5d637f49e17dffe07bb34717855c9f1c44069e1210306811693

SHA512
a98f8dd6cc77687fb2f63dfe310241084efe69cc675e224f3e6fdfdcbf74e113a65f03707b2a9a0cae33fd1ebd356bb4eb21af0fa500576bfbbc95e69107b0e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
e312f88e86619a7b3157f61a3440c681

SHA1
f7e1a35a6ec2db08087cdf9592224adc38892b79

SHA256
ddbdb90be833eadf622f80c6c7e6920eeb0fab9b1ff80d84bf741387d4f2f48b

SHA512
be5387d2ec9d98644754990e5080d3683fe00d4991d5442d3d6d5e2169a3218c105e7d2bbaa81dccf7705353238ce7eb653b7e67618a8129d679a744d422bacc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
8aaa9817268076d49321b6359ab30b3e

SHA1
2b66c4f389520aeadee5b0c6c90183328a2ce362

SHA256
7d95422b146279fdc3607094175491b4a7cb4a851985f9684d3f07af4dd78be5

SHA512
269afcc931d5f447486f24b1ec5c73c01e67206b6b29f86e7b457d90c9ca3dbad5052c4c0daf6983fe54aa31ab5f65ce245bb5045353890810a8099d542d34be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
c71a780406c51ba439e6b577ce17d387

SHA1
a10bdd6375b5392e3244f5203b33756cafcc0548

SHA256
1d71b9c70214bc9b5f1ec3f50c8fc7da99aab32ca62952a3cda39cc9792adeec

SHA512
2e62eef86e599d52aa81a4e4e5f0993e93caf15035105d0509a91cd598d19ca6f0e36c38050b21fb834b7df65f99c51176d5fca5fe67e61d22e6f9f936aca176

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
ceaa7c461dcbf8ffc97af39341e95886

SHA1
8522235f963eccbdbc8e6672850569333e619847

SHA256
f10e14d6e8a43d75851374b022a782ef0a39ed3259fc6984d569ff4bef241e74

SHA512
e61d059798845286bceaf71b391cf802f24bbba6de1a2a024e1d3bdb51a334948e45547175f4ac4bc44d506c04ed28059248659fbc3624090d6810e73441992b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
35aeabd837bb148000ae37d0c5e3c8f9

SHA1
6c615f6a1e34aefbb5391f0f910f2693474216a4

SHA256
0e405f86a6f298a458880122f048123e6b5df4e2f175a507b322f15f89416550

SHA512
9ff3c96563f708decc762af230975d1b6471a206c883fc86ae90f2f9bf7577f9a1965a95cdcbdb493f5436d8b3b8d62ccd174606806aaa879efd977599f9c280

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
708d9b5bde6af1c238fa6f703e5210a2

SHA1
af7391dc5ab2799a7091e7917d0ae25da069596e

SHA256
cb214c1366bd30822bce25aea66f99e52479b5bb84843e8d387fd0d87b514cca

SHA512
89428e07901e410055769edac82c3198301a212bc93851fd83a58be50be57dd659046d72fd9b2e982229b6fe41c2bc5a326118d921708fc2646e3732c0c178ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
bd754d972df76ce1aba4a43e6b639a09

SHA1
2bbbc17db6655cb6e54dba1392edfeb7a23148fa

SHA256
10e952efadf0fe8992ea4a069538bfe912685fc1ae65a7ec4ffb0fe06320c2db

SHA512
1af0e0cc5c39b6724f954d98cba3438c2b5576c6914e5bf77ac101ac0f605f8e3198b08e6decc227473895f55612c1b4fd50d52ec5a5dae77aaae9f8075c4a0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ae96cd02d89bd83ad1b25a8c84f9c3a6

SHA1
7bfcbfa48e53aafffbbc64498ef3478b1b19dbee

SHA256
3c0217fcae385c74700dc6934d2fa673849784d6ae21790719500fec0b25ac7c

SHA512
924ce03b5af4d593c34fa44867d119b96ceaea1d5d2a9bab692a8d95211401c7dab3f5ff65818d99ccf35f33714fce989770b82aa433f1ae626384e0229f4947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
5cc0df51cddad3bd7ef6f3a6b0306aa6

SHA1
1c21bd67e060607619d4f24f1d4d8c4ebf8246dd

SHA256
f4797981de1c878e81895c53d1a50b85f65d559a14bc7fd7a8bc5bd8249cc683

SHA512
85520a703b7a3f9319e1eacdf14fdf32c826da65f2d74693afb42709c24595ba46ca54718a8bea6828a3f774d86c97d10872b5fdca9e77ce48b410a5f51c832d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
7c226afe4ec3133244aa83af2fc7e575

SHA1
9a8f18f2fc6ecfa008222e639ecf54614bdb4ac4

SHA256
00c068028d8f01424087c596bbb836aa6a647626117992eaacecee733b1f0857

SHA512
6f4f01d1ed761fa3501e0adab8da4f4f1d13608e2c42c419efe8d8ef1858eee09fb69078f45cd80658024616e8ab0f7cf03ddf9a5340e2b0d283dcdb507d9ece

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
bd4296ce54775e045836fb3d752b9956

SHA1
a2e0781cbc1bd8a796e242b540712568c551bc29

SHA256
5b7287b724c561c9240780ce6c39ae9621778baaedb179b163d4074f4c141807

SHA512
42b0f575d5cd7217648f70d91e4ca84e2be5577867db1b994e77a568765445ec5d4815a5be93395c2bcc3e4f11de185c8e7f74c9202a5a3ef8ef8b6a3ce5af11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5ecdca563ce558197e8e257e13620d80

SHA1
6ed58ce8c49abc51a256ef742b3d1b5597412765

SHA256
faf9c3d1c7b774c099258edf93b82ccf6f54af727c7535a9c3db91a5649a1975

SHA512
133fb10ee3c6d349eaf7cec57e4963530cebc8e54cc3099eaa395c9082dc6c5b4060c249eef9b6a8cf9b5e2474e9a2b0a1869106cdfd1f2eacb7dc1028421f23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
b4ebc9fbe4c18d91686bb258a963792b

SHA1
f239808246b80c38a23ff69c07eec0b66937e4ed

SHA256
e124c7a2f1361851d3ca3c4255bd13e5b6019385a4ea15d1e160539ed2390056

SHA512
287171f53efc1d380872e97a0fee5ec8f59f77ae93d36666578dd5bbf0bde6f2590d8629dcd602f4fa75de7a9b3951470d0c6f784d53b597e601e7fa8b210531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
65a72408e90bafbe84f6ae63c7bade96

SHA1
c5d86102845e361e89fe47c7c6ce94b93ad1a60d

SHA256
d0cf48881d1bc8faf0fbd9e5035a7f5babc576b4b78cdc1e50a8e7604887a91d

SHA512
2124a093dce7f295c7a682b10d3c977c2c2e16d45ba500733ab7044c10eb99cc2b1596ea193df191316670b657ae9113ab4645ae04bc537a36ee299048f677bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e1408214401786395e346fdfae98e7a2

SHA1
d18019a6cfa103e45c6bf8a889059240ab9e148a

SHA256
cd2eef1af2eec5021bf504c53a6b6b02097df0de9a9bdb40fc5d21778d3348f6

SHA512
f95bd5d1aa63b65753a13684de17d8e99fcbd3f7fdd56a5f84d85a05c787556caf0b546fa0b6ed373084a023927e64e2483431f88d262ac3ad3b4051b1d46f79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\295ae54c-c327-437e-bd4b-c8abca6a30f1\index-dir\the-real-index

Filesize
2KB

MD5
bcb977ff339999388d7b82c2dcb047be

SHA1
5c1abac776c8a02ab4b2046e0da865d56c46c69c

SHA256
f055f7bb24473bd71faf9b6d6e7cdc1023f1ee305d17218f654a5677afb9a333

SHA512
491cec6ab9ba7844b0080f3f5801cd9152dbd81d5f443abc93bdbfd48851a015f765d0c7abc3d3e426c66b54031d1bc3648c81feb88901804b79c7f095927fef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\295ae54c-c327-437e-bd4b-c8abca6a30f1\index-dir\the-real-index~RFe5a4c3d.TMP

Filesize
48B

MD5
72c096209ec413051602ef251dcde4cb

SHA1
26344202f531e666351d1a5309971fd3ddcb5f1e

SHA256
6e006c50be68b25a9098eff5eb02ab0e44dc796cbba6f29fb87a548c1e84dbff

SHA512
290f1e0834930b365cb1c327ce66f518f22598b47d24f77b1f05e739e06b86cfb10c767dea73e66c877963f1a66bc318ed8bd5fbb3f1dbe5c322d374e2413d01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
146B

MD5
fd0d33f86c8a7b9b8d83baf877845782

SHA1
fb697fbd75b87f053f44a873aab8df5209b4cde9

SHA256
602690be68381a705a9d200d64423290ecff3d3f9465a58006f213253942dc54

SHA512
7d1fd796301f9ba31bde6f29c6df58304ab4ad4e12267bf16ef5ed82b53296e20d44c374e2751193a27fefb501c46efd8fa80cff7a652af93a80d1f56a6c58cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
0ee23b747e585ee0d737a668ad6c1193

SHA1
6c974a0d59d52784ef207adb105745d855d1551d

SHA256
50bf316617649f586851fd12c35010a58bf0cf54c1e8d0f6557854221397bab7

SHA512
2e66489f0dfad9ca74effc7ae9b85c9d29c27ef6c234605bb9862f2d6ceefc021d620f5d642dcf6aeed68a05af67a475b5f5853a5640373414373070e9527d80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
82B

MD5
fb17389f97e842043abbc22a0628f5b8

SHA1
cb128914117194b568099bc40a815f3f89c5a70d

SHA256
eb0d9f99ecbcc27489d6892bd44cc52e17d825bc3c57e7795fc950f89eae0812

SHA512
5900c3c92eab4a25d32a1f191a201d166d3a298ce280cccc063b4e12e09175e7769e261f164ca32981bfbf37ebca29744e0ebe1cf16c049e3d3bbf1364c2d718

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59eb9e.TMP

Filesize
89B

MD5
56b1f1056929ca9bc3486078c694f29f

SHA1
6a7bb7aa198c2351a6376c893bc3f4309f4eef3f

SHA256
ec8f189145427f6da62d26d0c73b5daec93ba76432300736fc228479a2e7fa8b

SHA512
7991955ec9eafb791354b47c328ea1ab6de04fa5835afd9033c7fbc3f71b257c79489b55f0bfe3e88603bee6c2bbbbc8dc2c649d3a1559df9e18344efed23a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Filesize
6KB

MD5
e2206fbb8cc5bceb1652a09151be5fc6

SHA1
0cfdbf08ffa4a9b48f82a1cb997ab9105d0cd072

SHA256
656b63556d11db36526a6640f404b913aa6bdea3474f8eecebe1f9093211cc31

SHA512
6b58e20227362024aa6cf0bcf57cb690d72f9a2e9b49f34646ab51ed999f3361b827b6ff4772f5dea5cb0c86e37bafd9d5cad4ec548e43c8c925f48151a411ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

Filesize
23KB

MD5
103a3cf5666cccfc4d6416362f971c80

SHA1
7deaf00edc76d9df5c1407cd78e07b76a44a6d47

SHA256
22b0e4f54c668966b4a51f7f3a69464c74cb696ab14ca291f5460f893d91008b

SHA512
54d60e0cf731e809a1a20aac18d9ffd31031f7a8bdaead464918f09e6ef170b0e54420ee3225176f2701e80340c9803eec7da9c37d4979661ea428db9fdccdda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1

Filesize
17KB

MD5
f547b9c8b03c4b662df906105c4160aa

SHA1
aaa9dcff275a87372500fef8c3a9cb8fcd1fa95c

SHA256
15a708fa3b0943db428e9e3821578fe3da1f834f3115dabb2c2b8d2a25e65539

SHA512
54c0ab9bb062db87f9f83b7551af820ba9668c74f55e4c87189769cef388dcd23d69d17e0ce24d478ef8e06b1c5e7445a4d9a4722acf808fc684cd997bb0b6cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
7d740d76a8ed5b8660249fa5222c98dd

SHA1
dea938cd5424b1b154877539d30a645161fbb5e3

SHA256
6362c081b5d1fd3a846d79a4c551724d61f61063a75185fb3fbe52ffe3f1fd6b

SHA512
79646aa060eaf18a60f2179d6b3d1732028bfda0ad3000071df43272df821fc844875959a2cd64784c8dde6e97c74368af3940954d9a40708c56edb2d1adde17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
120B

MD5
34d02e6c9fa73ea136f8556069f5734a

SHA1
aeda7ab3884d2d5cb28736c74e6e32550bfdcb26

SHA256
2c5a15f1436bc9d34bf4b35bfa6dcde47e3d7ce2e03030dd5af1cc2a6fd7ea89

SHA512
6c642dee10b6a45a6e7aa3e4338215652e4c1df5b0ac93e8daff62a089c88dd38784cf0e7ea20f5835ac30155941e31c8ecb1f3bf6ff5b8a66a89f5cb41458b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f623.TMP

Filesize
48B

MD5
d18c40ef92586fd626e3f3dee7db0def

SHA1
ae1cf07a5317da28dab6ec031983c355d584811c

SHA256
439d19f8d11f4d55d1c7e85d21815c1694d5641ba5cf4ca6f58a3d662b94c77c

SHA512
87a398e0b80e070d9c6e67bf6239ce94ab1647df67889b86d350e5f37c30d9ec2fbbb82d4cdd8bb5410e588c0ee501a0c26fabd72b23c61d4035a2daf344437c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d4f42144c314f43018d7ea6d60e78986

SHA1
aef62a4023d4ae37438d199e7fe3811aa284b126

SHA256
564491ae5d0954b7f73c209475c120953e2d719d4ce24bd5e59aa3fd8db4169d

SHA512
39993b5283d45788a550ae96eb08b912d0c9f055ba000a5e629069b9736815a50a55f0479e8e4e96b8d09ffa90381c3f4700eb9b0a49439bd3316d08c7c586b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
773acda03b734eb57e533bfe904614f9

SHA1
50cca02ded002fdd464dda9f67f7a57fd6f88e1e

SHA256
bff063d6781f8ac8b3a373279aa37cdb4dbe725a9a5cd7fa548025c7180eb23d

SHA512
afbd3b1477bc7965b3a7bb1bedf77e7b8cce111866e4c3c44457ffc78e399138162de14469a17aeff6b94d5effe82c1532c5ef9bd52b5b5e692b182032930b79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
3190a4f5cf81aa52729c5a3d8b38c3b1

SHA1
9c8ff6d4d4aa8893112f8b14ac48b8ae889f7882

SHA256
2663dc4a5d21804a22bc13792ae17a9702147c4a2c589a0850390bf3df882425

SHA512
f5a4a5d3b86a4749b5e259c3c414fd28d04b13afe06253bfb7130e726efeadb4488cda57c1ac8066573ecb8123feffd347dceb9d49d485e26d91edd72ecfd2fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7c3adb14b2b7926136334753473ca2c2

SHA1
dbd5ccf531e5250674c1f2bce313d063be5d9be7

SHA256
9afdebadb325ea9e0dae0270e738650c3039f96d473dc2ad01c90706d9acb0a5

SHA512
3d85f5de916ff28a988805ede292fa37efc7324cce3fd2cc5cb2d7fb646748713f07e36af113d3b33a5ac161cc93a089899e58789f304c074bcaa989e47a713b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
5f8e3fab3566ee20154d424235759f04

SHA1
51a67fd4c782c369d2876210cea53cdd1ecea9e4

SHA256
490369ff96835a4e9f217f7b48aa3f6bdd4fcdc150423d26779e24cfdd72c4ea

SHA512
2a0e0995f0783198dfd378743fce694482baf2185daf492ae256a3d968f02f350e8a73bf85b8b4e060d9df123641bf59fc0e106c8a6333e269d5b8258bb0d41c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
a77801bc11aabbd0b0586e6a90d43b98

SHA1
70d510c0a36c3e690f1eaf23d8180824a8de151d

SHA256
35974b7a8419158e701fa3667cc34731507787cca3e63e681926f2c94bab1648

SHA512
0af7802891eb82b78579b4f900d17ad194ad6212af295f57c2c606160f6a1efb3ae1c20ee04b2a1b3455bab18d3334e655f25229472c2c7e335a29bc100fdf8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
b2435f83cf69978521d95bcab49e8113

SHA1
19521d7b759bd6d8e43cf19fa17fe64d882b5694

SHA256
03d0f7bcafd0e95a0dd29f950243a3bc36a0eb5236bc0d70b87d1e4f831d9415

SHA512
0d35cd396b8e27fa57fb354bf027c96d54ad237d73778a496debc0f7fd093b4fe28bae1b37ef9cb0e901ae3fcf91020472ba7d69e15d9c505c312947a8349477

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
ec16c0833974f0e66ed194502ab21f6b

SHA1
d5b8fda5e56efa054f556eb169114efc8ec0d365

SHA256
8c940d6772ebb7898bcfe5d9145db3df7608e6bcffe4ee0eb6520a9cf9de321c

SHA512
81eb10dd0c95e52b956e7c282ba7ea51b1ab06a6bb082931fea667709f0877c87ca782762ef0b45916bf8c6fdd79fdb6bd218646d59c16fc3925e31382297eb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
aef9c98234b0319bb89a08dc0fa0ac72

SHA1
04aa775abdc43868fca7a7fabe98983c1f726b32

SHA256
6a81e10021dbb0e558a964f079b69a239938cf5d8fca0bb470812f5bbddbe28f

SHA512
ee19a0f274e091a740fda3d6fba22bd4cd342313f71b93c41fc663f8cd5b48098227c37531253c446fa0c341b5b205cedff9f6d81619a614dca5940a8ee517c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
cc159c22454c4c7f6bc560b5cee82ec4

SHA1
273ee92c636db6ba9bda3a3e303e566288324c88

SHA256
b91bb45b65918d14c1b2ecb46de106466874e4c26072e40ccb093bd9cd5ded7d

SHA512
935f96d950b9722309e9911d126e6448e52df43c726ddefead1663514e9539e510ad8b706562d468d1b9f25beb90fa5a815917956ce56749e73cbe235012d88c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
aeae7cdcb4b3f5b437a941f48963c6f9

SHA1
1c837098f9d8de27cc110eebe65d80c5b9178e35

SHA256
fcee40062674a62dada38a274daf9cf52b86a9d9633726387b34d3ca8dc48602

SHA512
931059c1a99416246e0b4b9045488d7e3993fd1d09853120cb1894ebef107893f1527e5ea651669174612966d384e7ff28076fb79f09d6dda4d416f9ed2bc5e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
40991db7bc7be1c1806a60832f852fd6

SHA1
3154e89938b7e993852cf9b560b7c83c54fe4160

SHA256
fecce789f33b6bc2f7cd2af9d0020d410957b5374b4ba12743cd052376bf8889

SHA512
98a64e6a2e81b4818c49a60c5938194f9825e4bc8e04381da5bbd099d542f8f1e647469f35c44f59463655dad4d123d87dea1f64592b0198730a5afe89e7fd4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
0ce816a0647733cd9f6e22a95d68bcbb

SHA1
05719334cad81c4506637526f632ab389c1fdcb8

SHA256
4acf36fc4efaf5d19e0f0ff61330db1979c97c37ae148a1c681693b9a34ae8e1

SHA512
a484f10077c6677b1de404b676da0b1aa85e47487733cc2bdd8c5cf28fe2395f0431e1c1dc668f916a3be34912508e51fe3b95f9155cc7383a1759f5f3446cdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58c30d.TMP

Filesize
706B

MD5
85e101ede2ce9250fe51cf18f65304e9

SHA1
10829df5031e68ed83211f46b110a19da0571855

SHA256
47c880015a0d7fdd92c06d6def4e1737475c24b617716c7caa771d2cb8d05e35

SHA512
7eaa738a704964ccb0bef2906f8e0bd0a34023390d6f3297c56797d730adbd7de4c212fa1ce4c3f9304504b4dbfaf8e7fd4ced2accfb25b0b5b2022821314baa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b7d6e87c7a3582873d24bf523935c141

SHA1
ee8d7535e0ba86219fecdcfea0f4fa9a12893fe9

SHA256
a81f207ef05cfbb032f94df7c27c9e77f2371e12e9fc4ace026072ebf37b8d70

SHA512
a34ef5e12caab4d317c7acb061a369ac4786794ef2fce8d27a8818dc41d084bfcdd1249d254cb57f98a982496a0a05a2a0ce62884082d5a6fa14b0b9c9ee938d

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL

Filesize
40KB

MD5
48c00a7493b28139cbf197ccc8d1f9ed

SHA1
a25243b06d4bb83f66b7cd738e79fccf9a02b33b

SHA256
905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7

SHA512
c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL

Filesize
160KB

MD5
237e13b95ab37d0141cf0bc585b8db94

SHA1
102c6164c21de1f3e0b7d487dd5dc4c5249e0994

SHA256
d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a

SHA512
9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL

Filesize
60KB

MD5
a334bbf5f5a19b3bdb5b7f1703363981

SHA1
6cb50b15c0e7d9401364c0fafeef65774f5d1a2c

SHA256
c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de

SHA512
1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL

Filesize
64KB

MD5
7c5aefb11e797129c9e90f279fbdf71b

SHA1
cb9d9cbfbebb5aed6810a4e424a295c27520576e

SHA256
394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed

SHA512
df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL

Filesize
60KB

MD5
4fbbaac42cf2ecb83543f262973d07c0

SHA1
ab1b302d7cce10443dfc14a2eba528a0431e1718

SHA256
6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5

SHA512
4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL

Filesize
36KB

MD5
b4ac608ebf5a8fdefa2d635e83b7c0e8

SHA1
d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9

SHA256
8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f

SHA512
2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

Filesize
60KB

MD5
9fafb9d0591f2be4c2a846f63d82d301

SHA1
1df97aa4f3722b6695eac457e207a76a6b7457be

SHA256
e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d

SHA512
ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE

Filesize
268KB

MD5
5c91bf20fe3594b81052d131db798575

SHA1
eab3a7a678528b5b2c60d65b61e475f1b2f45baa

SHA256
e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175

SHA512
face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL

Filesize
28KB

MD5
0cbf0f4c9e54d12d34cd1a772ba799e1

SHA1
40e55eb54394d17d2d11ca0089b84e97c19634a7

SHA256
6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1

SHA512
bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP

Filesize
8KB

MD5
466d35e6a22924dd846a043bc7dd94b8

SHA1
35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10

SHA256
e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801

SHA512
23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF

Filesize
2KB

MD5
e4a499b9e1fe33991dbcfb4e926c8821

SHA1
951d4750b05ea6a63951a7667566467d01cb2d42

SHA256
49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d

SHA512
a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB

Filesize
28KB

MD5
f1656b80eaae5e5201dcbfbcd3523691

SHA1
6f93d71c210eb59416e31f12e4cc6a0da48de85b

SHA256
3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2

SHA512
e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF

Filesize
7KB

MD5
b127d9187c6dbb1b948053c7c9a6811f

SHA1
b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9

SHA256
bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00

SHA512
88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL

Filesize
52KB

MD5
316999655fef30c52c3854751c663996

SHA1
a7862202c3b075bdeb91c5e04fe5ff71907dae59

SHA256
ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0

SHA512
5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\ADVPACK.DLL

Filesize
73KB

MD5
81e5c8596a7e4e98117f5c5143293020

SHA1
45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081

SHA256
7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004

SHA512
05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\Msvcirt.dll

Filesize
76KB

MD5
e7cd26405293ee866fefdd715fc8b5e5

SHA1
6326412d0ea86add8355c76f09dfc5e7942f9c11

SHA256
647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255

SHA512
1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\Msvcp50.dll

Filesize
552KB

MD5
497fd4a8f5c4fcdaaac1f761a92a366a

SHA1
81617006e93f8a171b2c47581c1d67fac463dc93

SHA256
91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a

SHA512
73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\W95INF16.DLL

Filesize
2KB

MD5
7210d5407a2d2f52e851604666403024

SHA1
242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9

SHA256
337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af

SHA512
1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\W95INF32.DLL

Filesize
4KB

MD5
4be7661c89897eaa9b28dae290c3922f

SHA1
4c9d25195093fea7c139167f0c5a40e13f3000f2

SHA256
e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5

SHA512
2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\andmoipa.ttf

Filesize
29KB

MD5
c3e8aeabd1b692a9a6c5246f8dcaa7c9

SHA1
4567ea5044a3cef9cb803210a70866d83535ed31

SHA256
38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e

SHA512
f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\tv_enua.dll

Filesize
1.2MB

MD5
ed98e67fa8cc190aad0757cd620e6b77

SHA1
0317b10cdb8ac080ba2919e2c04058f1b6f2f94d

SHA256
e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d

SHA512
ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\tv_enua.hlp

Filesize
11KB

MD5
80d09149ca264c93e7d810aac6411d1d

SHA1
96e8ddc1d257097991f9cc9aaf38c77add3d6118

SHA256
382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42

SHA512
8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\tv_enua.inf

Filesize
2KB

MD5
0a250bb34cfa851e3dd1804251c93f25

SHA1
c10e47a593c37dbb7226f65ad490ff65d9c73a34

SHA256
85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae

SHA512
8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\tvenuax.dll

Filesize
40KB

MD5
1587bf2e99abeeae856f33bf98d3512e

SHA1
aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9

SHA256
c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0

SHA512
43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Reg.nbd

Filesize
140B

MD5
a8ed45f8bfdc5303b7b52ae2cce03a14

SHA1
fb9bee69ef99797ac15ba4d8a57988754f2c0c6b

SHA256
375ecd89ee18d7f318cf73b34a4e15b9eb16bc9d825c165e103db392f4b2a68b

SHA512
37917594f22d2a27b3541a666933c115813e9b34088eaeb3d74f77da79864f7d140094dfac5863778acf12f87ccda7f7255b7975066230911966b52986da2d5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nssF3CF.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
C:\Users\Admin\AppData\Local\Temp\nssF3CF.tmp\nsExec.dll

Filesize
6KB

MD5
132e6153717a7f9710dcea4536f364cd

SHA1
e39bc82c7602e6dd0797115c2bd12e872a5fb2ab

SHA256
d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2

SHA512
9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1

Download Submit
C:\Users\Admin\AppData\Roaming\Data\1.bin

Filesize
6.9MB

MD5
1c78c8c3ee4df80ab819898677fc710c

SHA1
ac3b816d8ba428536b4479ab516e070974f38ca8

SHA256
c5c63947b8509b565e8c4dbe636256e7e55bd2ba6e247b270b833e701b3237ff

SHA512
dc3bc606aa7fc18c7457907dcc53989dfac48d5728bd485cdb6d1916b858bb83d7a36d77d5b9e6c1316bce69e80f6a3460ddfc2212448c43b48f5e73ee8653c9

Download Submit
C:\Users\Admin\AppData\Roaming\Data\10.bin

Filesize
452KB

MD5
a2f47c218e2507db3b22eb7e6d780001

SHA1
218a59915bfede4b5cbf2427200566709aa05bd5

SHA256
5b60fc854544978a715bcbca8f5a3abd28bcd0bd8b50fb953318640f7a266d37

SHA512
ae7152c080773d3910eeb05a47cfb551875e65dc5d88734114d03a6526348164caf179f2fc3b743850ed90b4fb80542e8b36ca31b3ef8168302500fbc0a701ff

Download Submit
C:\Users\Admin\AppData\Roaming\Data\14.bin

Filesize
479KB

MD5
e80a37c42ca0d2bc7f004afc4b822d6a

SHA1
f17361409ecb19135e3b4292199fb69bd4b012c8

SHA256
71ec6f96779240d530ddf16fecb1df97661b9e1ba8201135459729c8d4d2bac5

SHA512
b3ff7e71af33dc3368a198de8aaa4cbad8daf7ae90b3d398fe9f2cde490bacca07e6bcce08f6afec5943b634a2ed0ef9b121b89a68992d22bf3f831b6f33efed

Download Submit
C:\Users\Admin\AppData\Roaming\Data\15.bin

Filesize
528KB

MD5
3948ca5e92fb2d019a8f16765f7a5e40

SHA1
5290a66876ab0f62ba34b6b524a0e7771e31ee3c

SHA256
ca362bcaf0e62fca16febafc2d15cbb1ea92e2ad6cc22fa5337316ab8bf2bc27

SHA512
ad56d867e1040bfb5b2998a2d62ffc508989a5fc501f22ab775bc9f715f1cc2d4ccb0a899f8b2a82e7597bf715ad70b6826875e72e23273ef306f5bdca47df03

Download Submit
C:\Users\Admin\AppData\Roaming\Data\2.bin

Filesize
353KB

MD5
8766dce04feb646bf62206d64d6eb0ba

SHA1
91c5d588028c6c949e9cbcec950bcfaa35a791e4

SHA256
f87e1ab69bef059744ee9244f37b0f21ef7d7b06fc5245094cfa22637ef6ae9d

SHA512
0bc8fc880bb94ad55a732f2be207d88a6bb0ae8d97f91819e889d04420a71ae5d91af21861bad351c5fd7f4e944c1899b17df326bf19d310cc31a95fd38ee6a3

Download Submit
C:\Users\Admin\AppData\Roaming\Data\7.bin

Filesize
372KB

MD5
22df6fab4552241b0a7d650a15a336d1

SHA1
1e2b12c9ce52e5b433413d28d96be0974f6f7390

SHA256
d47f4fbfe7d145a737cf2e9a6c519e38510957a2ae663d4295e00ce0f6e651a2

SHA512
505a53580f7f76df021a466fdaec6ad8230ba04acc7115286d1a801d51a686fce08a23aaddaf0e134e94ce822191892987db8541edbefaa6928a2927c5508292

Download Submit
C:\Users\Admin\AppData\Roaming\Data\8.bin

Filesize
408KB

MD5
5ada580c290b53327fc8db29d5cd66c5

SHA1
a504aff6a9fa93bf4ccb69df17b5238804c659f9

SHA256
5dcf1f4b285a6dd70ec7acd77eeb5752a3d381a8a697eafd394fcde615f3ba63

SHA512
36da1958e7b4fad5367b257d9343c4eab59d50b01c610514d48eae2d0eeabf7efd06dd8fc63551a0a7e11df91aa3ceb063003cdd9c30c6755431ba218524fd49

Download Submit
C:\Users\Admin\AppData\Roaming\Data\9.bin

Filesize
13KB

MD5
f0e3d4ad2f1d09acf314a9e7a92777ff

SHA1
958224c3c98945c38f4e12ad6d1c64c4b91e189f

SHA256
b897644e314b31e0dd5159d061b9e77a512178f29a9f36076ec105e286212bb4

SHA512
28ccc056d2f5bde039cc3502a584cce3baa5cf9700fda8775344935438a6951989b3a24903693ac5e5292ff250cc27f338b783b29191948bed7ff4cc8038c8ac

Download Submit
C:\Users\Admin\AppData\Roaming\MEMZ.exe

Filesize
21KB

MD5
5761ae6b5665092c45fc8e9292627f88

SHA1
a7f18d7cf5438ee7dcb4e644163f495d3fa9c0ef

SHA256
7acabca3631db2a73a5e20abd050097e44390ead1d74717aed936601904b73c2

SHA512
1d743b407663e00a296c2ae45cb5a05a0866657afafbc9e8220e4c1839cbab2c09bf2a3510ec8016f902ccb7254edddf2a3412e7f5a4cafcabbeb5724a67b46e

Download Submit
C:\Users\Admin\AppData\Roaming\data\12.bin

Filesize
5.4MB

MD5
9e0ab3181d32ac9950dbe1026b197207

SHA1
d8b53f3a93d5e2df9507b6256f2e414712347256

SHA256
a3091d14161d268924a4d6195f820c64b1811d6afbd6948dde29e267ecb56cae

SHA512
424f8f0a6e945fcd831ca0d0f73f898dad0214f38cc477cb3be8b161836e349cd5d629444033e134e2fd6b8c85cae088f177aea4e26d7192a4f60a5739584c2e

Download Submit
C:\note.txt

Filesize
133B

MD5
910efec550edf98bf4f4e7ab50ca8f98

SHA1
4571d44dc60e892fb22ccd0bc2c79c3553560742

SHA256
7349f657a8d247fc778b7dd68e88bc8aba73bf2c399dc17deb2c9114c038430b

SHA512
320de5e34c129dd4a742ff352cfe0be2fac5874b593631529e53d5fe513709ac01f5d1d3dfae659f36a2a33aae51534ec838f5d3748cd6d1230a0f3d29341442

Download Submit
\??\pipe\LOCAL\crashpad_4760_GKIUNFEUVKCXGNWA

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/3132-1612-0x0000000000620000-0x0000000000621000-memory.dmp

Filesize
4KB

Download
memory/3132-1232-0x0000000000620000-0x0000000000621000-memory.dmp

Filesize
4KB

Download
memory/3616-51-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-50-0x0000000003350000-0x0000000003360000-memory.dmp

Filesize
64KB

Download
memory/3616-56-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-52-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-49-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-55-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-53-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-48-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/3616-54-0x0000000003340000-0x0000000003350000-memory.dmp

Filesize
64KB

Download
memory/7684-3081-0x000002297FC80000-0x000002297FC81000-memory.dmp

Filesize
4KB

Download
memory/7684-3091-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3051-0x0000022977940000-0x0000022977950000-memory.dmp

Filesize
64KB

Download
memory/7684-3079-0x000002297FB40000-0x000002297FB41000-memory.dmp

Filesize
4KB

Download
memory/7684-3105-0x000002297FCC0000-0x000002297FCC1000-memory.dmp

Filesize
4KB

Download
memory/7684-3083-0x000002297FC80000-0x000002297FC81000-memory.dmp

Filesize
4KB

Download
memory/7684-3084-0x000002297FC90000-0x000002297FC91000-memory.dmp

Filesize
4KB

Download
memory/7684-3085-0x000002297FC90000-0x000002297FC91000-memory.dmp

Filesize
4KB

Download
memory/7684-3086-0x000002297FC90000-0x000002297FC91000-memory.dmp

Filesize
4KB

Download
memory/7684-3087-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3088-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3089-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3090-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3035-0x0000022977840000-0x0000022977850000-memory.dmp

Filesize
64KB

Download
memory/7684-3092-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3093-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3094-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3095-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3096-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3097-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3098-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3099-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3100-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3101-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3102-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3103-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/7684-3104-0x000002297FCB0000-0x000002297FCB1000-memory.dmp

Filesize
4KB

Download
memory/8108-2930-0x0000000000A20000-0x0000000000B73000-memory.dmp

Filesize
1.3MB

Download