Analysis

  • max time kernel
    1170s
  • max time network
    1172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-04-2024 13:55

General

  • Target

    https://rocket-league.en.softonic.com/

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 59 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://rocket-league.en.softonic.com/
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3160
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff93e8946f8,0x7ff93e894708,0x7ff93e894718
      2⤵
        PID:1896
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
        2⤵
          PID:3284
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1928
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
          2⤵
            PID:1836
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
            2⤵
              PID:3312
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
              2⤵
                PID:1460
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
                2⤵
                  PID:4372
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
                  2⤵
                    PID:3264
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
                    2⤵
                      PID:5028
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
                      2⤵
                        PID:2988
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1
                        2⤵
                          PID:5740
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
                          2⤵
                            PID:5748
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
                            2⤵
                              PID:5756
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1
                              2⤵
                                PID:5764
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1
                                2⤵
                                  PID:5772
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
                                  2⤵
                                    PID:5780
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1
                                    2⤵
                                      PID:5264
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7652 /prefetch:8
                                      2⤵
                                        PID:5416
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7652 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:4036
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7704 /prefetch:1
                                        2⤵
                                          PID:1600
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7736 /prefetch:1
                                          2⤵
                                            PID:1036
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7724 /prefetch:1
                                            2⤵
                                              PID:4640
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6780 /prefetch:1
                                              2⤵
                                                PID:6804
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
                                                2⤵
                                                  PID:7012
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
                                                  2⤵
                                                    PID:7156
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1
                                                    2⤵
                                                      PID:6428
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
                                                      2⤵
                                                        PID:6484
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
                                                        2⤵
                                                          PID:6448
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
                                                          2⤵
                                                            PID:6504
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
                                                            2⤵
                                                              PID:6496
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7112 /prefetch:1
                                                              2⤵
                                                                PID:6488
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
                                                                2⤵
                                                                  PID:5380
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
                                                                  2⤵
                                                                    PID:5528
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
                                                                    2⤵
                                                                      PID:4044
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
                                                                      2⤵
                                                                        PID:3784
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7888 /prefetch:1
                                                                        2⤵
                                                                          PID:5796
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3704 /prefetch:1
                                                                          2⤵
                                                                            PID:5932
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7908 /prefetch:1
                                                                            2⤵
                                                                              PID:6296
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
                                                                              2⤵
                                                                                PID:2444
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
                                                                                2⤵
                                                                                  PID:6300
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
                                                                                  2⤵
                                                                                    PID:2028
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6592 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2748
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6940 /prefetch:1
                                                                                      2⤵
                                                                                        PID:6032
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6768 /prefetch:1
                                                                                        2⤵
                                                                                          PID:3292
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7920 /prefetch:1
                                                                                          2⤵
                                                                                            PID:756
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3424 /prefetch:1
                                                                                            2⤵
                                                                                              PID:6820
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7100 /prefetch:1
                                                                                              2⤵
                                                                                                PID:2136
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6940 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6164
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5328
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7388 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5744
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7912 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4956
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8096 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:832
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:6184
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6916
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8492 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5072
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8780 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5044
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9124 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6444
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8984 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:3904
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6752
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8008 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:996
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=7096 /prefetch:8
                                                                                                                          2⤵
                                                                                                                          • Modifies registry class
                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                          PID:3484
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:4596
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3092 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5344
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:636
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5920 /prefetch:2
                                                                                                                                2⤵
                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                PID:7020
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7616 /prefetch:8
                                                                                                                                2⤵
                                                                                                                                  PID:2072
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:6316
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 /prefetch:8
                                                                                                                                    2⤵
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:5972
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:6904
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9007302885941234891,12478950686995311558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8976 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:1200
                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                      1⤵
                                                                                                                                        PID:2520
                                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                        1⤵
                                                                                                                                          PID:1752
                                                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                          1⤵
                                                                                                                                            PID:5564
                                                                                                                                          • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                            "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Temp1_ransomware-master.zip\ransomware-master\go.mod"
                                                                                                                                            1⤵
                                                                                                                                            • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                            PID:6368

                                                                                                                                          Network

                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            cff358b013d6f9f633bc1587f6f54ffa

                                                                                                                                            SHA1

                                                                                                                                            6cb7852e096be24695ff1bc213abde42d35bb376

                                                                                                                                            SHA256

                                                                                                                                            39205cdf989e3a86822b3f473c5fc223d7290b98c2a3fb7f75e366fc8e3ecbe9

                                                                                                                                            SHA512

                                                                                                                                            8831c223a1f0cf5f71fa851cdd82f4a9f03e5f267513e05b936756c116997f749ffa563623b4724de921d049de34a8f277cc539f58997cda4d178ea205be2259

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            dc629a750e345390344524fe0ea7dcd7

                                                                                                                                            SHA1

                                                                                                                                            5f9f00a358caaef0321707c4f6f38d52bd7e0399

                                                                                                                                            SHA256

                                                                                                                                            38b634f3fedcf2a9dc3280aa76bd1ea93e192200b8a48904664fac5c9944636a

                                                                                                                                            SHA512

                                                                                                                                            2a941fe90b748d0326e011258fa9b494dc2f47ac047767455ed16a41d523f04370f818316503a5bad0ff5c5699e92a0aaf3952748b09287c5328354bfa6cc902

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                                                                            Filesize

                                                                                                                                            20KB

                                                                                                                                            MD5

                                                                                                                                            14636eb41d29140336f6635c79de39a9

                                                                                                                                            SHA1

                                                                                                                                            beb8a0e1253735904d10b367b1c69b367285ab45

                                                                                                                                            SHA256

                                                                                                                                            0894a13150c97d63d95c299e615f16dccd58097817e7d5805e277c9b411ff5ea

                                                                                                                                            SHA512

                                                                                                                                            4fdb585df84821a5df3b59e7399ce92e139a24b13db05d3ee9a55987e018b59174c5f26e760e7729f036ba451c25c89858463913f83710226ea2eae8bc8c0c59

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            4d08a69edd3a117dd090859249f55b6a

                                                                                                                                            SHA1

                                                                                                                                            543959356dd31a9cd3b919658f5a4c7925a65773

                                                                                                                                            SHA256

                                                                                                                                            6b54eb7be90c8846bc84ab1eb4a79faf0be2b7d1d37e104ccdb18e78181e4ee9

                                                                                                                                            SHA512

                                                                                                                                            0d562972a32425a65fde9a4049846bddc38c1009c6e05f8add794f63e416d793c457e13382c8e4971a7cf20fe3cb878ccb4bcfdd36be9d3af1ff5bb77ad2bf40

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                                                                            Filesize

                                                                                                                                            19KB

                                                                                                                                            MD5

                                                                                                                                            1d05cc62583a7db7139e30dc7a7c24f8

                                                                                                                                            SHA1

                                                                                                                                            001c2cb08fc747cde1028a45b75e462ab333ea08

                                                                                                                                            SHA256

                                                                                                                                            35d0d6598bbfd4722ba330d6d957829de05c18706b4ea9443402298720beb854

                                                                                                                                            SHA512

                                                                                                                                            f4ebf61f3a49256e0a1c50e88d940d75891b54a6766d68346550d0fc04d65c63bc6224db35bc150a108d6dec981cc9b292aa90d7c339ff523e7d3a7f90b3d986

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                                                                            Filesize

                                                                                                                                            162KB

                                                                                                                                            MD5

                                                                                                                                            c1d3a8f072456b3b35c2b2a2d50eb95b

                                                                                                                                            SHA1

                                                                                                                                            d0bfbc296905b561ca8154a5ee2e34b3ebe7df15

                                                                                                                                            SHA256

                                                                                                                                            372aa770b2de7cafd2f32737838dc97f7e6580da3954caff385a64ae01ede71c

                                                                                                                                            SHA512

                                                                                                                                            94d23ee908d2ac77694b1278193e6b0e2197cb334251b808bbbca434179475ec6cc9dee559a6ed2edbaaff94dd8f2a920f8dd450cee11a658879b40bd0dc5ee2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                                                                                                                            Filesize

                                                                                                                                            127KB

                                                                                                                                            MD5

                                                                                                                                            544657928621ed43ee28504ffbf64c2d

                                                                                                                                            SHA1

                                                                                                                                            c56828b81f7d92a4b4ab4b1df8561e034081e4eb

                                                                                                                                            SHA256

                                                                                                                                            27730fba8df82a3e288ff84441a2612676ecc893a2828d59e49c1f750fb1b0cd

                                                                                                                                            SHA512

                                                                                                                                            47a803a435a1f1f4e94041951684af86ed90a5923ab42cfe06a918d6bae46dd1eddbd3ffb7fe6315ce8abb3465c427227d0f612bd24b25b919dd0c1a7110c38f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                                                                                                                            Filesize

                                                                                                                                            20KB

                                                                                                                                            MD5

                                                                                                                                            44feeba601f44658d6d69cf503f6f252

                                                                                                                                            SHA1

                                                                                                                                            d1987975039fe1bc23a901794f8f14f36e70016c

                                                                                                                                            SHA256

                                                                                                                                            b51409e5a0091f3b2d2bff102ca2e72559884d6c815a1e6597d6c6c89266fe0a

                                                                                                                                            SHA512

                                                                                                                                            6062a2f6f815c01fda67dc4b7e80ab4595c1f12fdfd112706c0d09549d29549ac0e22462fdff4fcc7c0ebe4c62d444f471200677f53ea8b072666962119ce7f9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                                                                                                            Filesize

                                                                                                                                            182KB

                                                                                                                                            MD5

                                                                                                                                            375c899cca582d5680ef9dfc8c6a0ae7

                                                                                                                                            SHA1

                                                                                                                                            917d38d51150dfcba3f98f2b2d879a68bd717517

                                                                                                                                            SHA256

                                                                                                                                            6604053c1b262a682b940d74ec59ae4e1023a23e42e47caebb478e0fc4bbd70f

                                                                                                                                            SHA512

                                                                                                                                            a97552fd87dd71a9e27f670b3b39ff23fa55edca66bd13a2641ca5bc86439c24e35882a683eeb01c41f8e636bedeb632e5083bc73f81797a099fece6bbefe329

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                                                                                                                            Filesize

                                                                                                                                            146KB

                                                                                                                                            MD5

                                                                                                                                            46450d8eea03b5c93294945c679e45c3

                                                                                                                                            SHA1

                                                                                                                                            2bcc403622b79ffec0283b82fd6c4c7c16eea5a6

                                                                                                                                            SHA256

                                                                                                                                            6d3e573ed7824705f853d93445aad935308169dc03c4c460122111abc46fc3b0

                                                                                                                                            SHA512

                                                                                                                                            5a8186b21a3303c6a59161a9e40abc4128a76294de1011b1f104653bc096b21bb5131c6f0b26dd469972d6b84708d9896e4cf307b05ce9815cc346b2fef948f4

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                                                                                                                            Filesize

                                                                                                                                            140KB

                                                                                                                                            MD5

                                                                                                                                            a4301d3968c0e748dcc20610321a2cbe

                                                                                                                                            SHA1

                                                                                                                                            a1e896f14ef06f3cd59dea0e0f00b9bb70138b69

                                                                                                                                            SHA256

                                                                                                                                            4b8b341d819f2f4110e93b8b1bf4ccb4c1257d7ee07f453b759dd745ddccb399

                                                                                                                                            SHA512

                                                                                                                                            5778d2626f0a0ad80a2e182afd9db8aa7293b9ab96e2aadc103f7894dea083a4db93543620eb62a6c453c40d8840d190867f622954389e2661252d45a3e4cbcc

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                                                                                                                            Filesize

                                                                                                                                            75KB

                                                                                                                                            MD5

                                                                                                                                            1d8982ba5b8f9e9d34af6bd788fa725a

                                                                                                                                            SHA1

                                                                                                                                            fba3659cdc94a6f1f93c7bab734238f6274a78af

                                                                                                                                            SHA256

                                                                                                                                            5e3eebc06ceef034433a8ff745a6bf8932df2a9d0851c77bd89be89aefe8753c

                                                                                                                                            SHA512

                                                                                                                                            1fa501c2e575849c898ea56c28e752d78518c7821ff1793f4248d1c14a573cc04df9d2f4073dc8fd704c8b3fdab5d00653c64ef633d3c7ff6f4962ce89c9b98d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                                                                                                                            Filesize

                                                                                                                                            49KB

                                                                                                                                            MD5

                                                                                                                                            5b58546a692a1b01a2ffdd7f98a6df46

                                                                                                                                            SHA1

                                                                                                                                            38a8b79e34471c2220a2d8d6519df1c3d62d076f

                                                                                                                                            SHA256

                                                                                                                                            d987bfb3994607ae88bba664e77f037af8b2f395d21e405a37541a59e4b1a61a

                                                                                                                                            SHA512

                                                                                                                                            e9bec60cfbcc861c9ce5d3048194c93cdac798dd5dd32905805c057b6e87911a2978857eb2470025b997ab92340280caa5c5f5ded89a62500f70e4db98652ccf

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                                                                                                                            Filesize

                                                                                                                                            73KB

                                                                                                                                            MD5

                                                                                                                                            516e3407c1814cbabdb158c7ac216524

                                                                                                                                            SHA1

                                                                                                                                            f10a2a728cb1dee3b89340a28d749ef993fd00aa

                                                                                                                                            SHA256

                                                                                                                                            2266e2cd6ee88ee60e0912d49764c25eeef7fbc228132648d9f600c13c2829ef

                                                                                                                                            SHA512

                                                                                                                                            6bf14800037f8c0ee0a7a62605875dc7d78c6b89118ee07b8bc3ea1c24efd431291e1964c78a2d9d3e081566681908444485c9f4308764116468537e47e693ae

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            d0abecc2a0423786c386e42156fcdccc

                                                                                                                                            SHA1

                                                                                                                                            aa3c940308dcd6e307b36b8315129cc279759b70

                                                                                                                                            SHA256

                                                                                                                                            498871bcd829e0a0691bb68150abd8d295bd1b11a21872523b5ea3b62be10067

                                                                                                                                            SHA512

                                                                                                                                            74de71a873691a1fdc408dc50a75a8607107508be7151b41238024e35bc77392eac144b5bf720d340f54ea7bc58f95ad63cedc52ca9abbfdcd815b8453aa537e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

                                                                                                                                            Filesize

                                                                                                                                            75KB

                                                                                                                                            MD5

                                                                                                                                            00803309363c4335cdc603f5262662b5

                                                                                                                                            SHA1

                                                                                                                                            d4fe5afe5a7fe31c1cd54161cc8bdc4ffab5685f

                                                                                                                                            SHA256

                                                                                                                                            7201fe41ebc129e706e6428e892c61d6125d189f0ca641e15236fea3dd338051

                                                                                                                                            SHA512

                                                                                                                                            3c947a6810713b895fe1669f788cb6fe399aac6d74dc1552a1167ac05590fc3ee4bb9efae83040b168eb84eb297193d5732f3c7f50810cbd9c5da61336cf26a6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

                                                                                                                                            Filesize

                                                                                                                                            26KB

                                                                                                                                            MD5

                                                                                                                                            eac452e929deaec2f3242dc527852917

                                                                                                                                            SHA1

                                                                                                                                            166af014f2405cda1ffa3bb6ae5f32502aaf5d9b

                                                                                                                                            SHA256

                                                                                                                                            6bb97e69821cbba97e9024fc492de4c4ec64a3c7bde124d7a1a15faec161ff4d

                                                                                                                                            SHA512

                                                                                                                                            348befec796337705477f4658f1ffe286bd0e1dcb71955eec6f1507e6f217f0dbc7528b5c56458c101b1ffa0d40f82ef5ce5449682f0db3ce4f250b835c4e1d9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                            MD5

                                                                                                                                            7aa89f14c3c03e06a5705eecc92a609b

                                                                                                                                            SHA1

                                                                                                                                            b614539ce867fe953e3fec719e689ac7e2aebb00

                                                                                                                                            SHA256

                                                                                                                                            ec3f4f46674410b1555da9e0bb537b37dbcad67286fe6f83855f4f08c13ab730

                                                                                                                                            SHA512

                                                                                                                                            de8e3493a63ee949564ead440edd2dfc87329aa6049db79b41814427af28185f728244b00920036021147da144c7d064307ccc9db7184540a2f9b1e53337d4eb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

                                                                                                                                            Filesize

                                                                                                                                            16KB

                                                                                                                                            MD5

                                                                                                                                            9c6b5ce6b3452e98573e6409c34dd73c

                                                                                                                                            SHA1

                                                                                                                                            de607fadef62e36945a409a838eb8fc36d819b42

                                                                                                                                            SHA256

                                                                                                                                            cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

                                                                                                                                            SHA512

                                                                                                                                            4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                            MD5

                                                                                                                                            d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                            SHA1

                                                                                                                                            ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                            SHA256

                                                                                                                                            34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                            SHA512

                                                                                                                                            2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

                                                                                                                                            Filesize

                                                                                                                                            67KB

                                                                                                                                            MD5

                                                                                                                                            d2d55f8057f8b03c94a81f3839b348b9

                                                                                                                                            SHA1

                                                                                                                                            37c399584539734ff679e3c66309498c8b2dd4d9

                                                                                                                                            SHA256

                                                                                                                                            6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c

                                                                                                                                            SHA512

                                                                                                                                            7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000074

                                                                                                                                            Filesize

                                                                                                                                            36KB

                                                                                                                                            MD5

                                                                                                                                            31b020e454b14352f75a2a03e5f48ecb

                                                                                                                                            SHA1

                                                                                                                                            b5becea70eacc4e783f409ab792ad5fbbd6018e4

                                                                                                                                            SHA256

                                                                                                                                            186d9a6ce8045659afe2bdb293af223903aa8f6ca4ee8614beff4fdb4987336e

                                                                                                                                            SHA512

                                                                                                                                            a58ca80cb21ee91a2de3003c4fda452a9e729d7887f05afe88e07800fdf9877d4d1e0a5a7944c6008c024fea499649759df5918740c8715b3107e07d54786073

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000075

                                                                                                                                            Filesize

                                                                                                                                            63KB

                                                                                                                                            MD5

                                                                                                                                            710d7637cc7e21b62fd3efe6aba1fd27

                                                                                                                                            SHA1

                                                                                                                                            8645d6b137064c7b38e10c736724e17787db6cf3

                                                                                                                                            SHA256

                                                                                                                                            c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

                                                                                                                                            SHA512

                                                                                                                                            19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000076

                                                                                                                                            Filesize

                                                                                                                                            19KB

                                                                                                                                            MD5

                                                                                                                                            2e86a72f4e82614cd4842950d2e0a716

                                                                                                                                            SHA1

                                                                                                                                            d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                                            SHA256

                                                                                                                                            c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                                            SHA512

                                                                                                                                            7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000077

                                                                                                                                            Filesize

                                                                                                                                            88KB

                                                                                                                                            MD5

                                                                                                                                            b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                                                                            SHA1

                                                                                                                                            386ba241790252df01a6a028b3238de2f995a559

                                                                                                                                            SHA256

                                                                                                                                            b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                                                                            SHA512

                                                                                                                                            546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000078

                                                                                                                                            Filesize

                                                                                                                                            1.1MB

                                                                                                                                            MD5

                                                                                                                                            798e76073abe579251a34ee1dacf9b3e

                                                                                                                                            SHA1

                                                                                                                                            7e9294eec6545c8e1bbdb7849a73820cdca2fbd2

                                                                                                                                            SHA256

                                                                                                                                            8657f6d3867c20699a230df7939c02ca5fe065db2efcfecf5d8d864ca4873666

                                                                                                                                            SHA512

                                                                                                                                            cf5d69395e47fd4da4de0019a77162736c38f88ef0dd803d114388fbfb139a66083f51bbedd8ab205ab5d41f8464a685f4e0f6b5d3a13f7b91cbb211de14c7fc

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\52fe37fe0d8169ea_0

                                                                                                                                            Filesize

                                                                                                                                            32KB

                                                                                                                                            MD5

                                                                                                                                            560bf711bf2195d4b7699506c1ecce9f

                                                                                                                                            SHA1

                                                                                                                                            b7650d9cb3d509687ad4600bcad2a31c9e84a2e9

                                                                                                                                            SHA256

                                                                                                                                            d6e823c73a54fa7ae2b143ad7c3937809937711f36f7ed2594f2a36f5c5c23a1

                                                                                                                                            SHA512

                                                                                                                                            b401884cfd90497433f0d0a222feecdf095170a0c18d26cde8b26d241d90bd84d9869188f0d45e60431f0a203be2bdf523d098e7c35a9d2cada69bab7312159a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            43222933b8d4913e56eb164ae53b2796

                                                                                                                                            SHA1

                                                                                                                                            c7c8fac59aa5953b5f76c18dc73444b70a57766f

                                                                                                                                            SHA256

                                                                                                                                            30e638a51cb91481c9da51855a8a6d70143a2dfe7f6cb47f37e43311e8a46732

                                                                                                                                            SHA512

                                                                                                                                            50d11a7ac1b949348f7f8d790ed309c2e47164dc2cacc34f4f1c0857242c1d383eb83427b6e50c797542bba79b9ef4161e69a2a80e383d29600d2bafd91614c3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            adf71cd6369b2e7324b5c6f1ae5d8a7a

                                                                                                                                            SHA1

                                                                                                                                            8011e76b78f8232a2d925c8de6aaa4f5ee0736ad

                                                                                                                                            SHA256

                                                                                                                                            336997ec55abaff6f619dfffe23d6485bcea8b8cc733fd48a01ff52c05121026

                                                                                                                                            SHA512

                                                                                                                                            cc17e26aea2b0d4649e6d867662779a4058978b1509f20f6a49b6acb1ffb6f5695af7112a073e3d3d98d4319f09ad333813beb1c21c9353c1195408cf13a173c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            d9f9ef235bf63d52c08d9087cc10a75d

                                                                                                                                            SHA1

                                                                                                                                            2eb58ee2fca5e516b00c05cc3cbe84d1456ad357

                                                                                                                                            SHA256

                                                                                                                                            064e642e167d58add3bcb9286a72c67b86be6964dd07fed6b84e7c524d68e034

                                                                                                                                            SHA512

                                                                                                                                            acb90b2c2185345fa99ed080a676429b32b80c9cf48c0b269e25673a1d19326c65f6f152195505714b4ce8b0c17911fb90286cd7fe2581ab4b68dee35b3b1d6b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            0babb6be089542e6712b3f31c0ae2411

                                                                                                                                            SHA1

                                                                                                                                            c7c3c911cc53b401588eeb6bc0c8c6c9bf5838e2

                                                                                                                                            SHA256

                                                                                                                                            09a9e440d82d8b0dc0e49a7f5640b6013300dd9880cb36296dd706e69a2c0af0

                                                                                                                                            SHA512

                                                                                                                                            13692d30f4799558cdf1ec853214cb534aa35f2e7d32da859d0dfe3ff652879fd3f6a078f6b5acec368c3ced386922daf1d667883246adb3ad6ad6ad8410c101

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            9eddbfc55c607eee2454801fda42ef70

                                                                                                                                            SHA1

                                                                                                                                            07285547592ecc6cdd7747055d67d077993b75fc

                                                                                                                                            SHA256

                                                                                                                                            75c5245e26b3b7e4540cac13dbe722576a0ccfe00de84cb6d2d436ac43caa63f

                                                                                                                                            SHA512

                                                                                                                                            7de0660c39ed52111510836db1840da9d13e484e660c04817212008a973b1a7a809e80f10aa36b11bbf0c46968fb37999a41c50a5bce3089e45239b778751bb2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            85d8891fc62060140803bf9c72e2293c

                                                                                                                                            SHA1

                                                                                                                                            a3487a34042e3c3e19d40fe67e883e7a04896d67

                                                                                                                                            SHA256

                                                                                                                                            d1ee385ab2e2cc679cea0696225ddeb4691be954db2fcceade7f8dcc657f3776

                                                                                                                                            SHA512

                                                                                                                                            bb033ef32364f54fdf42fd6768f2977ce56f45aae7450acaf9e442995877a0f80b9411a4db3c33ae6fdd23ff319eb67ca7011f5f7bbe18fa56f7a56d01895f8f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\CURRENT

                                                                                                                                            Filesize

                                                                                                                                            16B

                                                                                                                                            MD5

                                                                                                                                            46295cac801e5d4857d09837238a6394

                                                                                                                                            SHA1

                                                                                                                                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                            SHA256

                                                                                                                                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                            SHA512

                                                                                                                                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

                                                                                                                                            Filesize

                                                                                                                                            23B

                                                                                                                                            MD5

                                                                                                                                            3fd11ff447c1ee23538dc4d9724427a3

                                                                                                                                            SHA1

                                                                                                                                            1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                                                                                                                            SHA256

                                                                                                                                            720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                                                                                                                            SHA512

                                                                                                                                            10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            14KB

                                                                                                                                            MD5

                                                                                                                                            c28e3e3bb8a5f7b1357c1963a5220788

                                                                                                                                            SHA1

                                                                                                                                            de133608b24895b76b87adc40894b1a275d87b6e

                                                                                                                                            SHA256

                                                                                                                                            6f733621eaabf5c77e9818477d331e683d5bc4792df65d93c12e5c20d194bd25

                                                                                                                                            SHA512

                                                                                                                                            7f03959ab1c0b8541ad9dda3ddf5ce93f4f0dcb1531f8aa0df7072ced47c286e2b1e101d5e9a971977ac18389bc6cafa0ddba4b5ca1bd1e9071470e1d9ced8a9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            14KB

                                                                                                                                            MD5

                                                                                                                                            0fd66eada337dee97c0ab2ca3138cba5

                                                                                                                                            SHA1

                                                                                                                                            ecb9ff4d486eaf10d85b505afa266d0247c761b9

                                                                                                                                            SHA256

                                                                                                                                            f76f1e5674eed2dc3ff63a3c37dd20e12db7cc4e1be5b30c0eb19037fb552be3

                                                                                                                                            SHA512

                                                                                                                                            a19e78561db4cdda277c2d8b908bf30102ab3d81be70a15eeed5adae1eb9f15a6ee4157f2b0029606d0eb1eff5431e439e79ae0e612f17f88e516bd9b2031b78

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            13KB

                                                                                                                                            MD5

                                                                                                                                            1d261a5e48d1af1837a6c877204be6b6

                                                                                                                                            SHA1

                                                                                                                                            8d2681afadb9dc6ecdfba0578e228da7d74655f7

                                                                                                                                            SHA256

                                                                                                                                            bce640f7b849e4da8f950de842784bbd0ea6d0cd1ea1099f37e0805fb02fe785

                                                                                                                                            SHA512

                                                                                                                                            0e20803314296ef8e9d05aa603254cb0f229fdbc26d31889e1a406fe6d4472133b386677f099890bcfc56912172fe460d24a5576b914a143732db16714ba036a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            16a64a1825d024431cd799c3f2903474

                                                                                                                                            SHA1

                                                                                                                                            021cc18c366847a49396ac238a37bc1373fc2907

                                                                                                                                            SHA256

                                                                                                                                            af7ab912ff40b176a8b4447518c7f1cc54cb430de8c79593f00cb20af90830a0

                                                                                                                                            SHA512

                                                                                                                                            39eaacc21db57253893dc72199d1585cb0870337f9c22905cb6319f9d26be1caf241c83e41deb86e316c638e2b59fd164aa87a60012faefd61e045d0816c23d3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            12KB

                                                                                                                                            MD5

                                                                                                                                            61c466090d248a519a420d418caca3b0

                                                                                                                                            SHA1

                                                                                                                                            9dbf81e3cc51d0d139f515609a5fd7ae4731fec3

                                                                                                                                            SHA256

                                                                                                                                            26753f507f101097df44c0c95e025171bba0cb94358ca8c1b9fb5dee170e7bc9

                                                                                                                                            SHA512

                                                                                                                                            c823def90f7cee62c9da6c902683ed9c9d8b91ed1a50d34edbd14b1e2ffcfb91127e6a9667c898e02ed6cb70f0a42830f9f28b2712d202d2b4cd943301fa98e9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            15KB

                                                                                                                                            MD5

                                                                                                                                            8f55cac39bd3276d88538fd2c944d857

                                                                                                                                            SHA1

                                                                                                                                            63f61466a9cbd1e3cd20eadb0888eba8ae1f0610

                                                                                                                                            SHA256

                                                                                                                                            bd5270f917d037e243f116a695351b708280b2387861a95909bf4f9df99f077c

                                                                                                                                            SHA512

                                                                                                                                            f9af941aa9079005f27d6dbcfbc130ff1db96f7f6b6df67c291b65c0e91c6f32fe1b73f03a6c04fdc45972925fa9cc5282d16b207f64ff9d564cb0a9b8c7c074

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            13d12bc452bc567c8f8f8173e1d760f7

                                                                                                                                            SHA1

                                                                                                                                            bd1a1890531bfd820ae34a644f463b6c35f5d7c5

                                                                                                                                            SHA256

                                                                                                                                            809318e92b57d963b65dbdd970db7cdbb4048fc470e5e9fb550f9f91778a40fa

                                                                                                                                            SHA512

                                                                                                                                            9992e655e9baba601ce54ced0a6fc72b4ab34cf9fa5b26ffa768605deb409d27d823b32f6e706808ace742be0438d3459a3f0d32449716e20bd20ced3aef2a12

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            16KB

                                                                                                                                            MD5

                                                                                                                                            74d05ad7aae2dd5d686599fef3edd05a

                                                                                                                                            SHA1

                                                                                                                                            ea2aecbafae93adab323ed5a36a75e6d016ec346

                                                                                                                                            SHA256

                                                                                                                                            fac85ad8e885bfcf6290b17e4bf9e8a5e075cb59cbce39ca309f23f7fd683439

                                                                                                                                            SHA512

                                                                                                                                            da74724aec05e9488fb59cc52606544ca0ee8195ec8385e2150190e88040978fbe2648a6e6716a78705fb0d847b4ce89e251937603ff2136cc005be36c7722c6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            379ba777ac2727273d5b189c1ce0f55a

                                                                                                                                            SHA1

                                                                                                                                            bb3b3153aaf30df0e64cab66df8942e06924f43e

                                                                                                                                            SHA256

                                                                                                                                            44e8f0fd66f54f2d3ba50190e24642fade195f5f0985de8d0b15776f369959f6

                                                                                                                                            SHA512

                                                                                                                                            e14e4939a178a54fdb2b5807f27ad93fe0c0c520886782a482b85b3acb258f387bc1a4153e480aa15ffac5759696731c4860b5cfb1495569f48ed3b1f14695c2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            756270049e15b73d4f37ba7bde15f2ef

                                                                                                                                            SHA1

                                                                                                                                            72adc87f38b8520089132f11f27b913f749a2846

                                                                                                                                            SHA256

                                                                                                                                            78e70fe68a136fe361c46c73dc05c4c37cd1b269f2e506c34b39ef65e6099f34

                                                                                                                                            SHA512

                                                                                                                                            611461a2d2ac09c91a5812c7edaf0d7ddda002e6b8cee4fd0e213221b1667ba888166d8d78f155b5a7f76060cc5fc0cc28c912d8cb459c4521c8fcf837aeb42b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            14KB

                                                                                                                                            MD5

                                                                                                                                            ce316795e4c411c4ba9d1eb9bd4ae6a0

                                                                                                                                            SHA1

                                                                                                                                            716b85d4f7a716c4879ed92329a5402078f2fdf0

                                                                                                                                            SHA256

                                                                                                                                            711a5ee1b727555756d371053d3c0efb4c8569f3fabcf6963067ecc06ed84452

                                                                                                                                            SHA512

                                                                                                                                            07fa9ee0341c0ddbc0e7401811fe145cf02a3e72fa73b44099c582050e009f0846f68d9032866648f865a728419381b1f665b14788411f042eeb7ff89cd48c4c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            952c44d37176edaf2d331c124e688a96

                                                                                                                                            SHA1

                                                                                                                                            47bf4a425b698cbe17657690cbf504f89e1e2f1b

                                                                                                                                            SHA256

                                                                                                                                            e51c0d98e10fcb009673cda7826cbc0cb4db6ce7e0f94e3a3dc9eb41ef675fb1

                                                                                                                                            SHA512

                                                                                                                                            6479d5dce3a68bf67aef026e2b5fb24f834e7654418c2804472027373f2de814d6581655c0daccb0e55b5ae0f2672027171f1585a534d107c14d60bbeeddc69b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            8be52fe7730c3bcf2ef1d836e2ff517c

                                                                                                                                            SHA1

                                                                                                                                            e72b2b4faf12b24fff2bea6c82b3b21d2dfd17c3

                                                                                                                                            SHA256

                                                                                                                                            b4d171d53a1bc39589a799e2ab93cb501701a66b15f4bc028cdb2dc3c1e9cea3

                                                                                                                                            SHA512

                                                                                                                                            be4c731acb3c2e5a15ddf3917de4f2e0899bcc5bdee3dec88c2c84f30fbfbe36fb5f1c280670dba77e0d012a5c3cb24666665b91b574797d3bd9d797fc2cd487

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\85dacbbe-fe5f-46f3-99fc-f8fddf4f82a2\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            1008B

                                                                                                                                            MD5

                                                                                                                                            df10628a06509f95c262d3aa0734865f

                                                                                                                                            SHA1

                                                                                                                                            1e495a48aa32cf8336eae48620f170f893a3f496

                                                                                                                                            SHA256

                                                                                                                                            4d88a6212c25edbfe0b800e65929cf81a5b0c4111a8de2060cafa9018bfd0a86

                                                                                                                                            SHA512

                                                                                                                                            68b7f7ff08ede211e4429fd1e7a0baf9b4973820b0e28b1f87a3399965426009acac0bbe86fbd5fe054abd038ce5e0903833783bd71d868509c0cd7a0241f0eb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\85dacbbe-fe5f-46f3-99fc-f8fddf4f82a2\index-dir\the-real-index~RFe57f0e8.TMP

                                                                                                                                            Filesize

                                                                                                                                            48B

                                                                                                                                            MD5

                                                                                                                                            6d59972366db865f2f713df526d40965

                                                                                                                                            SHA1

                                                                                                                                            f5660651f6819ee7083c019aecb22f7c442e523f

                                                                                                                                            SHA256

                                                                                                                                            58b563edfac4e963cb4901450e4bea771f45badd4ce3c06d9a0c97e63f4ad2e3

                                                                                                                                            SHA512

                                                                                                                                            93bb8b62e9c634a580b10d6ae691088b60e17fabed565281719ff3d201af6fedd9fa4c6a16f0fb3a9eed830b2166e69d5c6dc717eb735a84ba7295c16eaf9cc8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\a41085d6-d5e2-45df-b4f9-b28818d5a583\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            72B

                                                                                                                                            MD5

                                                                                                                                            6f75f91ea4d225353c622e77979b6916

                                                                                                                                            SHA1

                                                                                                                                            8c64a277d565d02be3926feed6e633c737472db4

                                                                                                                                            SHA256

                                                                                                                                            a24ab8bf1a4e658afd9ae1022e171d4d2f189974702136117976fbd812cfcafd

                                                                                                                                            SHA512

                                                                                                                                            c51c01a84b8e3977654e8fcc9c2da729ea18537d2b2eb8ca219a5b1f585420f5a0f897579edb9ef276db75e7a73fb0f5532cc24e567ae4b299c87947b2c1580c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\a41085d6-d5e2-45df-b4f9-b28818d5a583\index-dir\the-real-index~RFe57e510.TMP

                                                                                                                                            Filesize

                                                                                                                                            48B

                                                                                                                                            MD5

                                                                                                                                            d2f8ac0953b9680dc9b3677434f884dc

                                                                                                                                            SHA1

                                                                                                                                            b9d49e0128a489461c5b3061193e9a3445e1a333

                                                                                                                                            SHA256

                                                                                                                                            a6a2fbb67c0891da8315b6e1584d4f7d38d2e2220162b8373da08fb13ac8e993

                                                                                                                                            SHA512

                                                                                                                                            bb553c39ff7235be92522e11a229bb6027a0dcd8126f954cbd50c5f659466196295186842c0a136c137b4f2ef04cebd719a87c2b7724f8e2f3bdc3a057d3fad0

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

                                                                                                                                            Filesize

                                                                                                                                            193B

                                                                                                                                            MD5

                                                                                                                                            d2d4bf9a63dbe63a51fe6ec40d6917aa

                                                                                                                                            SHA1

                                                                                                                                            c287b383c8158defbb83ca9b6b02f523bac469ea

                                                                                                                                            SHA256

                                                                                                                                            17a5c003a03e18991cccbe44edf77cb539a23dd5f2bc5393d8bf4cf82c8c191f

                                                                                                                                            SHA512

                                                                                                                                            da83f40c594a11e7ffc678511d200f90c3c82bfc032465c9e49251d48e9cb8a302ae7d0f08729bff84b6c614b99d5c27dd43cee4256d47e84e8e49ff9a8654d8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

                                                                                                                                            Filesize

                                                                                                                                            191B

                                                                                                                                            MD5

                                                                                                                                            56ebcec04411e60d2444c0a6c99555a5

                                                                                                                                            SHA1

                                                                                                                                            1e41f0b5b9bea99649ced1b72353db98a28c3b2b

                                                                                                                                            SHA256

                                                                                                                                            d5f8fc3b3187c91e50ae3e5884cc1b4dae2ba7705dc9b63c6b544a56a86c92eb

                                                                                                                                            SHA512

                                                                                                                                            299e229ddcff367004a120383fad897c4519c35e36f538462cf489671b0fe8f6bca96669c904ed5f262f22eef18fe5c688feb2b0e54b65565824d42585396ab0

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt~RFe57950c.TMP

                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            41e37533ad585c1d04e442e26097339b

                                                                                                                                            SHA1

                                                                                                                                            d8221b68a7d234cb17dee2c97e43e84952088d26

                                                                                                                                            SHA256

                                                                                                                                            3fe0f75ddcecdc75cfeec1a205a78d5cae8ecf8c377a1eb34582e3b79e76f3da

                                                                                                                                            SHA512

                                                                                                                                            9511404c1fe8f58036a965159c6093c90972048542d66ca03c6b29eb25e117d93f92611d641387843c50a24845e9a0f2b8fd2b17428346008dfc008a0a481697

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            216B

                                                                                                                                            MD5

                                                                                                                                            e18f28d6ab110e37306a0343b8f0b392

                                                                                                                                            SHA1

                                                                                                                                            73832b2524e7c1cea3057fc4be8cd140fe0a4d95

                                                                                                                                            SHA256

                                                                                                                                            1851eb4abb7070d552f648eadd783569908859eeab3c3dba9313df1d1ede0225

                                                                                                                                            SHA512

                                                                                                                                            a1cc6d446748e2dbff76fe5dc4a63c71be1b984bd1f338f8415148f221f29c36452e8c0b444a5010bbf7da75b613d447e942fba62bc624360a261998377a22e6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57e32c.TMP

                                                                                                                                            Filesize

                                                                                                                                            48B

                                                                                                                                            MD5

                                                                                                                                            3e0c28adfb179658cb6309975aab168b

                                                                                                                                            SHA1

                                                                                                                                            5cf149b00004f623056c422b5c829439e1b07dbb

                                                                                                                                            SHA256

                                                                                                                                            3f8598dca47404da93a1c95028966e61db80adb6e6b053df858c1bb504284de5

                                                                                                                                            SHA512

                                                                                                                                            5372fe388f555bf7742777915b058de6b730dd93f3a2e829887a469b170f478c0a8a4736e29fb0ef770f72f8a3ee27df727e9283a716356d7fc569a8961af618

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            cfb8a870b7fd3abb4d3ddde23e3bc591

                                                                                                                                            SHA1

                                                                                                                                            8be93a38116f0e552faa3abd485d3b82ad16548a

                                                                                                                                            SHA256

                                                                                                                                            8659aba1d02e91afef84a08becb728bc47bac9875c4c3ad60feac61dea676f9b

                                                                                                                                            SHA512

                                                                                                                                            f521c3e65032c89ad8bc748f613295c08d02fdf1e1a61a143f7746999c44a0b009ba667784dd1e84103cc9396ec17e218d03b58743fd96628cbd3941f5e2e17a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            0465ac3cf5c05afdb91576f1ebb79e83

                                                                                                                                            SHA1

                                                                                                                                            b33ab3c54d1cdfbdd6d538a1db04e3f76a54283c

                                                                                                                                            SHA256

                                                                                                                                            9db20ed2211de475437b84b589a28f56a2e711b0dff4d07a5a5dfa1930108cca

                                                                                                                                            SHA512

                                                                                                                                            719865340933d628a3b01ffc005c15934a38150ef8974ba2d0fc0098ae58bbef82b56fa4a3de2fc13ccfdb05cee0cf8182039396d2c18bea1cb3f8c92e1488bb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            09e489801941b40de5cd826bbb66b881

                                                                                                                                            SHA1

                                                                                                                                            3b6a92b132d34934dfe8d2769b213cb1d8c90fb2

                                                                                                                                            SHA256

                                                                                                                                            1b8672628deea04ab37b1d5b64164d8991f40f1220530b28e95e71a42d1380df

                                                                                                                                            SHA512

                                                                                                                                            daff60aa21cd6d9a5dc50a32b4cfa551624c1b7033882db287613057bdd8b389b07482c95078e5c4d50de4da8f4fa1efccc88f79351a17d840a16e46c9dcbb5b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            a5ebe304e0ca7aec2732b62e44d6ca00

                                                                                                                                            SHA1

                                                                                                                                            98e3858f6bf1cd16048044f10b39ea4054893703

                                                                                                                                            SHA256

                                                                                                                                            5d6ad5a40badc484cd846e3de5f7bf67b97cf4bb1c18697b53bc256a77d52911

                                                                                                                                            SHA512

                                                                                                                                            5e946194b033415abe33c4c1560204b9df5b5a96273ac6c0c9f28ce51699b182679dcd892566feb5f4939c32aa30e7a507e2b68037fe9124f376f65c6438c3ee

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            b43317fc6c4dac3d6117adbe7c35a8c3

                                                                                                                                            SHA1

                                                                                                                                            70652da273c0b7d9b8fb4e9e83eb22c9976fbe80

                                                                                                                                            SHA256

                                                                                                                                            b54c0cc85674124695175d93cad80302cef6623937cd5898335594bf97690f1b

                                                                                                                                            SHA512

                                                                                                                                            e7d47e227278b51eba041a24646d00a4dab65b739c5da64d606d65dfb9cf3493396cd8c3dc57e474eaef8c85cccf3e56690d3609212e9593c9564eda15774324

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            1ea0a8671a8d1aad3936499c567e3554

                                                                                                                                            SHA1

                                                                                                                                            a27ce4773179b3dbbbb312adfe3d5636205362e7

                                                                                                                                            SHA256

                                                                                                                                            74cd3ce511e5703dfb686d346da95ccd4c7e7f7214eaad7bb003c0aa8a08b695

                                                                                                                                            SHA512

                                                                                                                                            545a127c09886a66ff8743c8804ba09d964c67a8e811aedb271050a8efb65cbdd478eacf1003017e34ba5550f94df4d02e5f3b0959e16c3ea00e3f4186717627

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            e4fa341ec50ab4d3d9109a6bbc7b2274

                                                                                                                                            SHA1

                                                                                                                                            5c5f380d4189ced5ff70f4c8a187082fb486e8eb

                                                                                                                                            SHA256

                                                                                                                                            21c33d28410f0d7dc609bcde8755fe10cb9b6b9c098e17d7a313011a7dfe1e75

                                                                                                                                            SHA512

                                                                                                                                            39730f2c6fc566ce46957c765c80af137bf18a29d682c87174fdc644a21d419e1ddde007318fdb25d04eb350a8ce63be54cbe55127fe4f87c40fdfa66dbc5e5a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            b46622dd261dfc36abaac560c74cd278

                                                                                                                                            SHA1

                                                                                                                                            8fd8169187c6234355141a4afd64e517bdc176ef

                                                                                                                                            SHA256

                                                                                                                                            55c3764b8b35c3731fc01e0f69f295f74cd030e8ecc87994befc9baef245439c

                                                                                                                                            SHA512

                                                                                                                                            0d5fb4559f05ec27dad89bf010ce2e9b02abd2eab919273caec0f27c27793700414dc91a36867f9c83a293894a1fb367939872d192f58f3530cb44e1fa1eb494

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            a0f4c04e14ee1161af195162fabfcfde

                                                                                                                                            SHA1

                                                                                                                                            3a9019e57e46773fb324e3f4151b9320dbf13b6c

                                                                                                                                            SHA256

                                                                                                                                            0f1eba72ce14edc65d382f5226a29d8fe3c130fd2c91d95411b0458005f69938

                                                                                                                                            SHA512

                                                                                                                                            1f1a37d0635f07e316c0b6565adcb088cca5905eb1183466aa0b3c4f35fd70bd4a0ee43c1469628e8fe4e3ad76c6fe12581075bc753c301dfbde3be3b88f197d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            09da257bb13baa5209b223dff520a0c2

                                                                                                                                            SHA1

                                                                                                                                            12a7d03d9bad4d75767550916cb4627a2f0e9d51

                                                                                                                                            SHA256

                                                                                                                                            74e6035c50c83759f07c1522b402edff9f4208db1362c5a0ae316e1d060f09c2

                                                                                                                                            SHA512

                                                                                                                                            5117dcc18629e98484560b9bf90e3b0d856f38727a32043129ddf75c0333e5f263264668d4b9c749e228396d4c0edf506ce2e263a648d6d7d56d5a078b3a512d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            e363f62f02f2f363f2aedce09cdcabbb

                                                                                                                                            SHA1

                                                                                                                                            58c21be080076cc13cfb17a214b77badda9cc86a

                                                                                                                                            SHA256

                                                                                                                                            887a044d75f68201ddcfec26893daa853031d830405bb43afe0190957f4cf15e

                                                                                                                                            SHA512

                                                                                                                                            c8b5d3a40dc10bcca00c73bb02361522d840ca9edf884f35f86f2d10ebbe35f39b323c7669761922e80aee6507b50c0458e4a4d9549cf873e2d75c4aef2c9cb6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5780d8.TMP

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            ec8d451e524fbd74d29b2ccfa83b8546

                                                                                                                                            SHA1

                                                                                                                                            637f5bbd0dcb31f5c2c955daefa6df8f374540f0

                                                                                                                                            SHA256

                                                                                                                                            065463eb3746ed573379653de94f37e6584ec73838f4a70a557410b1ff0569ef

                                                                                                                                            SHA512

                                                                                                                                            bda629297be7a6bfde7fc8dbd0008f4e4df6f57398511694b36c756399c8606f6aa8fcb5500d6ba056edd3f736b354205a8ac3e730f1ca542220921d09cf9286

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c501603b-018e-47a0-86eb-818f56124fcf.tmp

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            6dd8b9b36e6ef0eff8cb942a09a6c8a6

                                                                                                                                            SHA1

                                                                                                                                            9d92a22a7509a24d7ef0ab6e5ce452fa008fef2d

                                                                                                                                            SHA256

                                                                                                                                            d679e72ff92de25731cb6bf058b44d3b6b709119769bad47d32d20f8388078bc

                                                                                                                                            SHA512

                                                                                                                                            9ac40ae8c1c018d73c9603f2762949e247518ee6bd6bbc81fa356aaea28d52a9936340bdc90014b15f18223f36e4a963c04fd040d629f31e6eb94745a034f925

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                            Filesize

                                                                                                                                            16B

                                                                                                                                            MD5

                                                                                                                                            6752a1d65b201c13b62ea44016eb221f

                                                                                                                                            SHA1

                                                                                                                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                            SHA256

                                                                                                                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                            SHA512

                                                                                                                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            11KB

                                                                                                                                            MD5

                                                                                                                                            0f7262634c798385e1f6b4f19f87cfc7

                                                                                                                                            SHA1

                                                                                                                                            627e918a2fb6a521505d806f606699408f7df576

                                                                                                                                            SHA256

                                                                                                                                            e6831efb040249aa439194674963a6bda73ded111834f8d161c7979cb2ef59d0

                                                                                                                                            SHA512

                                                                                                                                            331186992cf62dd60c37b832d041997b7205bb3154335ce3dd498b7df04e15ae9ee1b7350be681adfded98514bd2159cd40f811b775e05b3f086cfb2782ef9fb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            12KB

                                                                                                                                            MD5

                                                                                                                                            d9adb51be052385f515b9ac50e06e711

                                                                                                                                            SHA1

                                                                                                                                            bdd37ae15ee81ea5d8469d2fef02946a395b602b

                                                                                                                                            SHA256

                                                                                                                                            9184c6c490e6b48a7b3d7321b074154bd007c9b537c4ba7fb05cfb9f1c4f5717

                                                                                                                                            SHA512

                                                                                                                                            ba9a39b6ac3d772747273c753e597833aa06b81fbd3d269f0e2fa6f0cf718ea546e7f100ca1c95beb0301de0e55e489451d102f3dca69529a6470153b56f1ac9

                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                                                                                                                            Filesize

                                                                                                                                            2B

                                                                                                                                            MD5

                                                                                                                                            f3b25701fe362ec84616a93a45ce9998

                                                                                                                                            SHA1

                                                                                                                                            d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                                                                                                                            SHA256

                                                                                                                                            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                                                                                                                            SHA512

                                                                                                                                            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                                                                                                                          • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

                                                                                                                                            Filesize

                                                                                                                                            124B

                                                                                                                                            MD5

                                                                                                                                            950f4d963e23efb2f21162c0efb71813

                                                                                                                                            SHA1

                                                                                                                                            902bc766a3076c594385f9ad2992a12b7736f7a6

                                                                                                                                            SHA256

                                                                                                                                            d42dfdf531f3d66e4131e65a6892a01fef8441bf8fd793b993db1cbd275f8490

                                                                                                                                            SHA512

                                                                                                                                            3e7bd4c6eda4c3e4ba4d1f521252b04c24aba365d54e3a5059ffe6666b0abd6c0e7a91a28d4afbcd5d4e6842aa5b4d7b61b80382094e02231cdcf9e28e64ac79

                                                                                                                                          • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock

                                                                                                                                            Filesize

                                                                                                                                            18B

                                                                                                                                            MD5

                                                                                                                                            fe5db2d01a2b406a04b7a69f32691672

                                                                                                                                            SHA1

                                                                                                                                            89e1ad40051645df8c5679228ad6c5beecae97f0

                                                                                                                                            SHA256

                                                                                                                                            11f9f225675b769d185baaef7637cab45b4c855927d1fa9014091d6d896b522d

                                                                                                                                            SHA512

                                                                                                                                            9a2a25a541e00153dd939babaa24786a6757d0cae8ea6e3eac3465094654ebe6494cd5e80c9035d0a00243eb9a1cca520742b28253a94a50d17de8cc74379227

                                                                                                                                          • C:\Users\Admin\Downloads\ransomware-master.zip

                                                                                                                                            Filesize

                                                                                                                                            73KB

                                                                                                                                            MD5

                                                                                                                                            48a6ce0542884d8e3871c7d422bebe93

                                                                                                                                            SHA1

                                                                                                                                            c5564f46537ed20e8cd4b71ef3bc2d3774be14ec

                                                                                                                                            SHA256

                                                                                                                                            43346e5dc1511cc29719e657e6a7cad3c4288ec6a6158c7648593fe70d0774c4

                                                                                                                                            SHA512

                                                                                                                                            4ec5f4d760c5d494ccb6f392cf3ca82f2cd1ef11495b1e352f318fc2c5ead7558b5d4fd98a8224b058411e3b323645a3c7ff00d2e46a35381d7eb38a3d9b01a0

                                                                                                                                          • memory/6368-1544-0x00007FF93BAC0000-0x00007FF93BAE1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            132KB

                                                                                                                                          • memory/6368-1554-0x00007FF937980000-0x00007FF9379FC000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            496KB

                                                                                                                                          • memory/6368-1555-0x00007FF937960000-0x00007FF937971000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1553-0x00007FF939D40000-0x00007FF939DA7000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            412KB

                                                                                                                                          • memory/6368-1559-0x00007FF937880000-0x00007FF937898000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            96KB

                                                                                                                                          • memory/6368-1558-0x00007FF9378A0000-0x00007FF9378C4000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            144KB

                                                                                                                                          • memory/6368-1557-0x00007FF9378D0000-0x00007FF9378F8000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            160KB

                                                                                                                                          • memory/6368-1556-0x00007FF937900000-0x00007FF937957000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            348KB

                                                                                                                                          • memory/6368-1560-0x00007FF937850000-0x00007FF937873000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            140KB

                                                                                                                                          • memory/6368-1561-0x00007FF937830000-0x00007FF937841000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1565-0x00007FF9377A0000-0x00007FF9377B2000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1564-0x00007FF9377C0000-0x00007FF9377D3000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            76KB

                                                                                                                                          • memory/6368-1563-0x00007FF9377E0000-0x00007FF937801000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            132KB

                                                                                                                                          • memory/6368-1562-0x00007FF937810000-0x00007FF937822000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1566-0x00007FF937660000-0x00007FF93779B000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            1.2MB

                                                                                                                                          • memory/6368-1567-0x00007FF937630000-0x00007FF93765C000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            176KB

                                                                                                                                          • memory/6368-1568-0x00007FF935D30000-0x00007FF935EEA000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            1.7MB

                                                                                                                                          • memory/6368-1569-0x00007FF9375D0000-0x00007FF93762C000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            368KB

                                                                                                                                          • memory/6368-1570-0x00007FF9375B0000-0x00007FF9375C1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1571-0x00007FF937290000-0x00007FF937328000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            608KB

                                                                                                                                          • memory/6368-1572-0x00007FF937590000-0x00007FF9375A2000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1573-0x00007FF935AD0000-0x00007FF935D23000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.3MB

                                                                                                                                          • memory/6368-1574-0x00007FF9359C0000-0x00007FF935ACE000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            1.1MB

                                                                                                                                          • memory/6368-1575-0x00007FF937550000-0x00007FF937585000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            212KB

                                                                                                                                          • memory/6368-1576-0x00007FF936980000-0x00007FF9369A5000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            148KB

                                                                                                                                          • memory/6368-1577-0x00007FF937530000-0x00007FF937541000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1578-0x00007FF9358A0000-0x00007FF9359B3000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            1.1MB

                                                                                                                                          • memory/6368-1579-0x00007FF936960000-0x00007FF936971000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1580-0x00007FF936940000-0x00007FF936952000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1581-0x00007FF936920000-0x00007FF936933000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            76KB

                                                                                                                                          • memory/6368-1584-0x00007FF935700000-0x00007FF9357FF000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            1020KB

                                                                                                                                          • memory/6368-1586-0x00007FF9356E0000-0x00007FF9356F1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1587-0x00007FF9356C0000-0x00007FF9356D1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1589-0x00007FF935680000-0x00007FF935698000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            96KB

                                                                                                                                          • memory/6368-1588-0x00007FF9356A0000-0x00007FF9356B2000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1585-0x00007FF9368E0000-0x00007FF9368F1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1583-0x00007FF936900000-0x00007FF936911000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1582-0x00007FF935800000-0x00007FF9358A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            640KB

                                                                                                                                          • memory/6368-1592-0x00007FF935610000-0x00007FF935622000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            72KB

                                                                                                                                          • memory/6368-1591-0x00007FF935630000-0x00007FF93565A000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            168KB

                                                                                                                                          • memory/6368-1590-0x00007FF935660000-0x00007FF935676000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            88KB

                                                                                                                                          • memory/6368-1593-0x00007FF9355F0000-0x00007FF935601000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1594-0x00007FF9355D0000-0x00007FF9355E1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1552-0x00007FF93A630000-0x00007FF93A660000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/6368-1551-0x00007FF93A660000-0x00007FF93A678000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            96KB

                                                                                                                                          • memory/6368-1550-0x00007FF93AA50000-0x00007FF93AA61000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1549-0x00007FF93B140000-0x00007FF93B15B000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            108KB

                                                                                                                                          • memory/6368-1548-0x00007FF93B160000-0x00007FF93B171000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1547-0x00007FF93B180000-0x00007FF93B191000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1546-0x00007FF93B1A0000-0x00007FF93B1B1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1545-0x00007FF93B1C0000-0x00007FF93B1D8000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            96KB

                                                                                                                                          • memory/6368-1543-0x00007FF937A00000-0x00007FF938AB0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            16.7MB

                                                                                                                                          • memory/6368-1542-0x00007FF93BA20000-0x00007FF93BA61000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            260KB

                                                                                                                                          • memory/6368-1541-0x00007FF938AB0000-0x00007FF938CBB000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.0MB

                                                                                                                                          • memory/6368-1535-0x00007FF94D5F0000-0x00007FF94D607000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            92KB

                                                                                                                                          • memory/6368-1538-0x00007FF94D0A0000-0x00007FF94D0B1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1539-0x00007FF93BE10000-0x00007FF93BE2D000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            116KB

                                                                                                                                          • memory/6368-1540-0x00007FF93BAF0000-0x00007FF93BB01000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1536-0x00007FF94D580000-0x00007FF94D591000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            68KB

                                                                                                                                          • memory/6368-1537-0x00007FF94D420000-0x00007FF94D437000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            92KB

                                                                                                                                          • memory/6368-1534-0x00007FF9514D0000-0x00007FF9514E8000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            96KB

                                                                                                                                          • memory/6368-1533-0x00007FF938CC0000-0x00007FF938F76000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.7MB

                                                                                                                                          • memory/6368-1532-0x00007FF93BB10000-0x00007FF93BB44000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            208KB

                                                                                                                                          • memory/6368-1531-0x00007FF609560000-0x00007FF609658000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            992KB