discordrat | hxxp://google[.]com

Analysis

max time kernel
626s
max time network
629s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
24-04-2024 18:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://google.com

Score

10^/10

discordrat microsoft persistence phishing rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTExNjk5NjU3OTM3NTcxODQ2MA.GQCXQH.xBOhNgRuTYbvNVUNjtEDkZuxt-O-554xPfUm04
server_id
1116412300795072686

Signatures

Discord RAT
A RAT written in C# using Discord as a C2.
stealer rootkit rat persistence discordrat
Downloads MZ/PE file

Executes dropped EXE 6 IoCs

pid	Process
3460	Ro-Shard.exe
5496	Project Ligma.exe
5596	Project Ligma.exe
6104	Project Ligma.exe
4484	Ro-Shard.exe
440	Ro-Shard.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
703	raw.githubusercontent.com
704	raw.githubusercontent.com

Detected potential entity reuse from brand microsoft.
phishing microsoft

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2177723727-746291240-1644359950-1000\{87D960F7-2793-4ED7-B998-FC14E2F6E964}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\Moniker = "cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 419417.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 576166.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 17 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
4448	msedge.exe
4448	msedge.exe
2056	identity_helper.exe
2056	identity_helper.exe
3012	msedge.exe
3012	msedge.exe
5384	msedge.exe
880	msedge.exe
880	msedge.exe
880	msedge.exe
880	msedge.exe
4848	msedge.exe
4848	msedge.exe
5392	msedge.exe
5392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 52 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	3460	Ro-Shard.exe
Token: SeDebugPrivilege	5496	Project Ligma.exe
Token: SeDebugPrivilege	5596	Project Ligma.exe
Token: SeDebugPrivilege	6104	Project Ligma.exe
Token: SeDebugPrivilege	4484	Ro-Shard.exe
Token: SeDebugPrivilege	440	Ro-Shard.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 4904	4448	msedge.exe	88
PID 4448 wrote to memory of 4904	4448	msedge.exe	88
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 2480	4448	msedge.exe	89
PID 4448 wrote to memory of 3084	4448	msedge.exe	90
PID 4448 wrote to memory of 3084	4448	msedge.exe	90
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91
PID 4448 wrote to memory of 3676	4448	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd9ca246f8,0x7ffd9ca24708,0x7ffd9ca24718
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2292 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3320 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3324 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=device.mojom.XRDeviceService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=xr_compositing --mojo-platform-channel-handle=1948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1744 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4108 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6132 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2044 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7368 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7824 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7832 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7904 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8292 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8492 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8796 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9236 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8304 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8408 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9464 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=1364 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6960 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8832 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8600 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9256 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9596 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9588 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2132,17193850855469303592,12830675685322178634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5392
- C:\Users\Admin\Downloads\Ro-Shard.exe
  "C:\Users\Admin\Downloads\Ro-Shard.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:3460
- C:\Users\Admin\Downloads\Project Ligma.exe
  "C:\Users\Admin\Downloads\Project Ligma.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:5496
- C:\Users\Admin\Downloads\Project Ligma.exe
  "C:\Users\Admin\Downloads\Project Ligma.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:5596
- C:\Users\Admin\Downloads\Project Ligma.exe
  "C:\Users\Admin\Downloads\Project Ligma.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:6104
- C:\Users\Admin\Downloads\Ro-Shard.exe
  "C:\Users\Admin\Downloads\Ro-Shard.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:4484
- C:\Users\Admin\Downloads\Ro-Shard.exe
  "C:\Users\Admin\Downloads\Ro-Shard.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3660

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x490 0x338
1⤵
PID:772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8f38951143ede15b2f00d3352e458d47

SHA1
1130065985230474657d5f744e99312f22c69485

SHA256
3a559763ad1634ef40108700025a909cc76ca8c66d6c77f41a07e2ced4c9ff65

SHA512
5376e21235d1b828a0d04e35d26154a1e52db3fe02690fa272ba982da55b88bb0ab7473e6b2031fe8d19798abefec072e22542132b175912b31279cda6f15f57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b533661b945a612876de1e58ce73d065

SHA1
d93286945efeb7f33b49f8e594cdb264884c827e

SHA256
e5480b47432d7b0ca972afe477fac49f5fc1e8e82aaeab6401de99045949bd65

SHA512
672bc0f694e763a8597eebcce7728716a09515ad17854fae58d1f8df8aefca152eaabfd637bbaf8acae8e7936309809525a9f058a990148964a58c831d96dc4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\520f3704-57f1-4e02-8e8b-683fee79c52d.tmp

Filesize
19KB

MD5
9c7369028d2974547f8fe3694f6100ad

SHA1
a0d54165450eb74e9e7d18d022df79552a8f20e3

SHA256
7674597a0255655b1c0651594a6fdd6dde0e2dea7be6e4c21d1513a213235ef5

SHA512
72ae31a5cd3ed047d23852257d8c0376c975fed6e98b8b5f27eee4e881742fd2eebc2c19a02c483a9f4f6edd749cd145fa4d9f8e5a74c6f8df8263fcc2e066ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
67KB

MD5
d2d55f8057f8b03c94a81f3839b348b9

SHA1
37c399584539734ff679e3c66309498c8b2dd4d9

SHA256
6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c

SHA512
7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
36KB

MD5
d7e863d09f4b278488a9b7a869a189b3

SHA1
514028c5d64c7ef1a1dc4cd1cf0d68c87bba250b

SHA256
5a61b7622e1e677b3d859c0236a03dd29bf2eb95c94a8e564e161acee4b36f59

SHA512
17015b3161c0bb16be1255a368134491390a21690f0b0552a3a384173e2a1f58257dbc7f154d9c4f19efeba5fabc578f0046578e50abc857c5ef66c741709796

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
1.1MB

MD5
798e76073abe579251a34ee1dacf9b3e

SHA1
7e9294eec6545c8e1bbdb7849a73820cdca2fbd2

SHA256
8657f6d3867c20699a230df7939c02ca5fe065db2efcfecf5d8d864ca4873666

SHA512
cf5d69395e47fd4da4de0019a77162736c38f88ef0dd803d114388fbfb139a66083f51bbedd8ab205ab5d41f8464a685f4e0f6b5d3a13f7b91cbb211de14c7fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
33KB

MD5
3cd0f2f60ab620c7be0c2c3dbf2cda97

SHA1
47fad82bfa9a32d578c0c84aed2840c55bd27bfb

SHA256
29a3b99e23b07099e1d2a3c0b4cff458a2eba2519f4654c26cf22d03f149e36b

SHA512
ef6e3bbd7e03be8e514936bcb0b5a59b4cf4e677ad24d6d2dfca8c1ec95f134ae37f2042d8bf9a0e343b68bff98a0fd748503f35d5e9d42cdaa1dc283dec89fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
75KB

MD5
cf989be758e8dab43e0a5bc0798c71e0

SHA1
97537516ffd3621ffdd0219ede2a0771a9d1e01d

SHA256
beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615

SHA512
f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
19KB

MD5
81e082cc637d2b7ba62d8036bfb86760

SHA1
17bda8ec788e9210aa4c3835e3f4d78951068482

SHA256
34c65b446a25113078238e018c0b42c404084fb3bbadc8bf9838a0f949f0faa5

SHA512
902d16b96f8f0a0b823d6b14c803d431af57942976a04602543c152993ebffd7c89db847dd56bb1d56623d93f274378040d068d0f102dd6a4e550c4c4799f01e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

Filesize
17KB

MD5
5e5918e943a26d2e4037bd7418076110

SHA1
06b96fc7b61f3ef879a3d37536ae28bc47b0cf48

SHA256
1f0a2e09c97c138320fba7e9291d31247912914223fbfe953917005bac107a88

SHA512
db49b108f7ebf7431acb9215605c2d39813f2e7de7a982632f1c69be6f77ffc8217d1a7d94661f93da1d17c1f6c6295852387413cc5b780b4829bad1975ccf3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

Filesize
16KB

MD5
4788fbf6eeec342e34324c17018809cb

SHA1
a106ac8930ca7bd5aa02e95c26d18b72697c4cd0

SHA256
9e17412cde745ec7ffdaff7555e727e4ae5797b3e57aad630b10a7dd38cca898

SHA512
c390bb2171e2db82bef6f1bd39908160f19a4c0147c4e4eafd672a33c19878770418f1ac2ed622fd8176b7f1f063a55e457cc6c97cc3e8b58196292ca00ec8c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

Filesize
103KB

MD5
68b3385a6dffc8d64e019832acc918ed

SHA1
7d29dda429ced1040ee8959b5688387d4dd1b4e0

SHA256
17190922204c288b25c7db6b10eb4130b147c53171e442b25bc1f2d56bb74aec

SHA512
3c90deebed1c066b1629adda526ada2821ba66dc523910c71d84bac4d88bfb830965af355c132ba9d7aa84acb58bf602ed9b4c70f6e2f42a1b4cae203ae85426

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

Filesize
16KB

MD5
12e3dac858061d088023b2bd48e2fa96

SHA1
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

SHA256
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

SHA512
c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

Filesize
34KB

MD5
e8117f0a14c3cdb602bb39b3dd88d992

SHA1
b4d08bb1089be5eb84ef9408400e594fbefa05b4

SHA256
2f11c98f111e90b39ce0e3ea3d62912bbccc97a54340d17843a5cedb742c9811

SHA512
97fac38d5a5bc939a65fc289dcefb0be7c7da50ec6828653579bb306b7d3b387299e71cb45cacbfc5cfe3e442bccb31726674c4acfc0d76000fdc050b737f589

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ac

Filesize
44KB

MD5
2b312fee4bff7fb9b399aa619ae1811d

SHA1
cf5e3270ef62ea6ce023f9475dbf7ed67e10527c

SHA256
fd5fb41882dfe849ea47547bf38b9abc435683d7473703b4cb37e8c28b1de4cb

SHA512
3a42c3a12da46656d8dca9b54651027873f42d2ec2e6e706a41b4b520d387f0c3c0388e3d117bd49174d7074079f3404c00b6141c8dd22d38ef1a257f52a9791

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ad

Filesize
24KB

MD5
e1831f8fadccd3ffa076214089522cea

SHA1
10acd26c218ff1bbbe6ac785eab5485045f61881

SHA256
9b9a4a9191b023df1aa66258eb19fc64ae5356cfc97a9dda258c6cc8ba1059ac

SHA512
372c486ac381358cc301f32cd89b7a05da7380c03fa524147c2ddf3f5e23f9b57c17485aaedc85b413461a879afc42e729547b0c96c26c49bbdb7301cd064298

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b0

Filesize
48KB

MD5
0c2234caae44ab13c90c9d322d937077

SHA1
94b497520fcfb38d9fc900cad88cd636e9476f87

SHA256
d8e6f62282e12c18c930a147325de25aef1633a034eaf7a3ce8de1fb8de09912

SHA512
66709f74b19499df1e06700e1c257e14a82ca4287194e4b177b3f333748d927f413c8c459a35e7e5a2f92d28410b0129f106d94e3dd85bc0dd0b986add83b18f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b3

Filesize
24KB

MD5
8278023fac368f67d8b83512b48cf0f9

SHA1
cfbb90dea9e8a9df721806c7d49eff44166b2197

SHA256
1e62f0399a3c5a499b3c93622608d15d3948c3c335359bc695bf3522b03fd48d

SHA512
e04ba7a9402379c064bf5707a5fbe3e5ea6de978b1ad50d38f9b30bef47dbb761f0f8461de8cfaf7c33779dbb47fcf4df7fe387d12fbbf899f7530f6f63a340d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b4

Filesize
20KB

MD5
8b2813296f6e3577e9ac2eb518ac437e

SHA1
6c8066353b4d463018aa1e4e9bb9bf2e9a7d9a86

SHA256
befb3b0471067ac66b93fcdba75c11d743f70a02bb9f5eef7501fa874686319d

SHA512
a1ed4d23dfbe981bf749c2008ab55a3d76e8f41801a09475e7e0109600f288aa20036273940e8ba70a172dec57eec56fe7c567cb941ba71edae080f2fdcc1e0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b5

Filesize
65KB

MD5
c82fbaa7e5113d3ed2902a3500ec8631

SHA1
c9b4889980899c0f2aea9ac8d0bae28b59e6add3

SHA256
4f4e25ef0961b656039ed8628951b5ff6c0a197f8866374b5937e182b12ff278

SHA512
fc3227c51b9bdcf0917b040aeaa925795e153c7a78469b7e1c87717c1664f46208e5fc3e413f93724ef0fa94aea655db55f04c5a61dda0df737c25b75393136d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b7

Filesize
59KB

MD5
063fe934b18300c766e7279114db4b67

SHA1
d7e71855cf6e8d1e7fbaa763223857f50cd1d4bd

SHA256
8745914e0214bcd9d2e6a841f0679a81084ef3fc3d99125876bee26653f4253e

SHA512
9d0dfc21306b3a56c2ecdf1265392271969e3765e161e117c8765125b34793e24458217cf6514b364f351f47e65baaaf5856be0d13406a789f844d6ba8c7075f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b8

Filesize
21KB

MD5
e9a5315fe482aa6a84b4cd461a41a5cc

SHA1
06833b57adceda1c91eaa2072d368c54fe4995b0

SHA256
6a00fd28670b7ddc6725260bf6cf4c345762edcc5e74e4eb77367b4969efa9c9

SHA512
86dcee3ad5c69dfb9bf6f0e8246b1bf2f95a27188c17e1cab7b9270774c37b8d0e6b2acfd33f144ba74d17c849299a9c750dab9c8f1bff09147befb7876421c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b9

Filesize
151KB

MD5
7739350f11f36ec3a07b82584b42ab38

SHA1
d97e0e76a362e5fce9c47b7b01dab53db50963d8

SHA256
d84e9971e8c344b9ff5a5968e7252270757f211f0d408e26c12693729068ed75

SHA512
2cb436985e382ec17390a1f8a7c112bdf18206c66d845934a14f9c84781200828e05c57cef5d4128a9d9b96778042ecb7ba2c031563c78ee9b8ec41accf8a537

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
a614e9a3b4b98f66a5071d7aa3e368ac

SHA1
90f64dbc1e806d033ce2d779b7824d4c16d41a73

SHA256
50136a8447cb3b7fd4d9e1ce6a529fd0160e017f47424c76869c9848fe648ebb

SHA512
e00adb77e5faa611aad5ddfc2c07fc5fd4acaea13c64fd9bb699cf5d8d80693af7b92bc183aa45f2ac62dcd9bd3332ea946d3bbfbd9b1261ee20ec390326263c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
f62e5a0365704f4d784edc23db7709ee

SHA1
198b9094b8b4ad31c55f16b1c32d6701305abfe4

SHA256
cba410da3a87b510bd0a76da588d16bd0128c49ad192b461114b22c2007dc068

SHA512
35d4f88badd1017225d9db7b2cd4fa70ea3dc5884346753fdaa9582ed4c7998c2b827e6f6f615ff72a3100c73664023acb85f31cdade77292d06a465924ffcf4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
06e872da4c36d92b12b19458914048ce

SHA1
fed3835d08d11af8c29f1a92ec874e3d9e1b95fe

SHA256
f60c71f143319307fe305312ef0a2ae639f1cf440c1278e0e0943a946052de0b

SHA512
71b1f6b99fc424caff8e795db9fb17c1e0f0f285a81bfdeceaf6c57f8bbab4b8771f637ba41f8f2cf8d218545b3b26673c2baa8d749466fedab7ecc3327fb336

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
6e3af8de05b3f5dd584a22536e89a496

SHA1
8ea8c6af0c74d5478023e1ab4c7993202868c42e

SHA256
34c55e3529add853dbd510c9d127e4bf9c0a092e30e501b25a6f0f37efaeffa5

SHA512
d786e6481d1794955e92f62619db7b8928f46737b9de8ed826f97694623b5a73880a5ad6a5cc5857915c127ec2d8d5a070c2737dd917ce0be8029103d878ca9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
55922fae97ecc83732560c7201b76e85

SHA1
59ae8ce233dfe59eb9da513c0b6e6ed1efd074c5

SHA256
f27ee0ee37dbf1e3656e6827a355a56345e604a80fd73d97d46211f5ab2db23c

SHA512
039b69c801398e20211907177fde7f8bc5be6dac1086eacc918bc72d88af5677b57de1332468dea5f93d64f691f27f5f60d9923aba4fc63faf04275f1590fda4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
f3c3aeb1fdc18c4b9177939b471fbaef

SHA1
43256c22ae4c4861fc695bc90cda96fec2dd0982

SHA256
0716c53ea6bdcae6096e511697447c92f1ffb492ce38a7caa781742f9e093e2c

SHA512
0b1570db37d32379385f91b897f7a7ac28df7cf99b1876231bb97fd20df51c1e090f55362d25fdb66d5da236f54f604668e28a55f2ca51867c3cec8d42befbd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
63bb4fdc98a38ce56e51bfa34e857c7d

SHA1
69443d820b8386d0b10bfc06e78ee31b0457b4a9

SHA256
94530bb3fac07e748d964808df66d491cd8a92bb13ee0ad52e11c4257ed5337d

SHA512
94735e4749bc56baad3c7556f24ea43b72f6082d4849eb52064d5c8c24b052114f8293ec00490f45c6db5968459448efbaa3d28e1f39d97fe255767e851957a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
b579afb7aa0fb28e0eecf9fb47a90d3f

SHA1
4462c123d96b2965998caea611337e81bd662408

SHA256
903c909b5884df7437d20486b036950e19e31cb6bd6b676daef101ae5fd4c1c4

SHA512
afd03119ec88c09e8c783231762525a753c4570a2b14b4c1286ad71ac8d6ea49251471875e08738708e6e842e868c6f18069cec657a7cb50b6949bcb88fed2b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
b2f398e94135ebddad89743110813010

SHA1
910da5c386939ab07c41114a61f4b3c304594e44

SHA256
c810279bab6a69d2245130528beca48b927859a53b48530b41da1c31ddf7649e

SHA512
0ed71ea2e472eff340f4a967f7a1d84750cb5b388dc7f96aa0c3cc94f6a89f025f001e5c028a1a8e98320d01a02a7c5ae1e81d1ced693f1267e5f7cdd543c466

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
12KB

MD5
055a8f122defbfbb526e2df27aca0b92

SHA1
8db603a7ffa10d4780733b47fe79a45041fc61ec

SHA256
9935d5289d6bc3f0278944ce2ff979ba7d4d376a8acbf0afa1a0de9f9fa90ec0

SHA512
8d29ca9a0e70efa3b0538a19ebd9a53316bae80416cef27e6cf18c61f21fa11abb2041c6f055b70f32f746c1f08cff81628e86d462c0bf3c6dcc411032c4a89b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f55b4cdf3747b97a04641c3ab21b6372

SHA1
9cb87b19713e3ab7a927bd2393da80d8a55eb324

SHA256
5edbfefa5248690ef606275db8a974cc27561e0deefc2bfccbc6fd78a3dbe851

SHA512
0bd6211e2a3d21abee7dd539b1e8ace03177bc1bc734f1051265b8838f638fe36f3ef68636f65881b4e399c86a20914e0120263fa43ea53100ef424a4a6c4502

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
5c42983d0a3d9a3061783ea067c5598b

SHA1
77d065ef5035fdca499f0cf9360085fb2c0ea9bb

SHA256
c782eddf7d3af620da4e0e5db141e423e69092653a518b6ebb491d6c77263144

SHA512
1754698b91a9f3ae03c8dcd472c1a5d9b74384230a2d490075d79c9e35b63c53c0ee6f98721aac52462f81837260580d32ae5d0aff131ae847b5113910ac8d2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b673e56b3109264a138464b90b70ce08

SHA1
20ea92fc85ad532314b039bb520ca10d159e0235

SHA256
549708eaf7462033207afce66f2bb5b33f2901e3ba3a4f7ca590c206429f7940

SHA512
5c519a2cc4c98acb363ab3da66f2524329a824ff069b2282f198e5d329e38b86dcc01a57a3c8c250f74a0e65e818c2601d0df3df6719b9b59be19b0f2e85b07b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
f6de28b20617f6151cd5d37ca7f3c7ca

SHA1
25bcb4cb11b0d79e568b7997c4dcc3af6f99b174

SHA256
1ca7325bac42a8739a58f35b191753cdd2c08f9cb5ea940d65101e413a13abf8

SHA512
bfa5ebfb9ddd2c94f79ced072551e02913900e404fa0d5173e42416692416ff1f3b7e733c8544b43152ecd14606efe3cb90ba0170ecf7ebec699738df73aa509

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
797f3686bae52073f33f0ce0ed793df0

SHA1
7713f31499e8f2024f022774e1eaf40c90760862

SHA256
194b2897478b2a8b006a56ece05b572b59f947898aef1e8445a5637eb28f7dfa

SHA512
9414267af7f8fe21c76faf3e0785924313033dafc446f5f13011bb6cebd741ea6351e453ed5656d2721760343381688efc8b797d4883bc1bb92a240cf4662a2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
1861b03ac2cd04c3d941261fbb7f200f

SHA1
fd9bb7122edee33d0104b222adc409f3ed1dd48f

SHA256
937408a0d8cf2672bf928657c63cd618ce8b63bd5b0f5a5003dddb4961eef38d

SHA512
0a63c13eeedd08945906f36d33e4778b26f76a646747947365daec528c6f53c234b2908825f49c267ebfbd069b800192d6fef1d29744837cd38ce92bb3f150db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
499e55a2b846fea95b0159334952896b

SHA1
727c8691cb173e75b7787a5f647bea3f15bbf0b5

SHA256
581b604ca4e24acb358ad48d61a58639abf8566c986e6e01f295c25840308c41

SHA512
0cb44daa6ac31044fe4e0b9d92e5c653c640b7fcc74caf96d4ebef8d29a36e52fe9b4a90de8770c4aa2ae8d4bc952bdc2638b412b869ba590a82485ad66c239b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
1a0921d2158fd1064092c105b1792e74

SHA1
ea4dc9b671ec4ede48fa7e61161d8d09d53482c0

SHA256
a4f29bcc395536bc343e79ac4b25c2086a856f007c2fb2ddf82dd9e7cbae215a

SHA512
e9f0e4c4dfe9024963a420fe86a7ffc3048e235645e39dc0f4b67779a89eb9330a877482b324d562030979459f50154100228190909c3a832d662de8d05097af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
22a980548ae0336d9af8f25cf2a67bb0

SHA1
6bb9036bc3e582fb54a1648d7ca5171282007477

SHA256
9842ab0a58f7effd8baa7fc31cfc28e29312b16c385a4156a78922ad52170483

SHA512
b009a24f0e990bc8f6f8c1da010ea039ebe2913601558ebd868d7d29127ff4dcc9532fb32c93e76db7c757e968ef490e25c29ef422108a2c9e9377828dd3708f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
45a4db952dcee6f36073b02fdd742627

SHA1
2376bb58da26b5d28fe088fa80f9c9369cc7840d

SHA256
1fb75722ad48e912a3bbfba249d41be5a4bdff6e2bd6896afa9f541ebcc367b6

SHA512
e09dbfe770c66eb90fc31b4aff787c83a3fbba2d9d2dd9ff6d4f98d4b951c5f24b8a3083a4baa7814b8195555c01c048f721c8a93e1278051d8f035fa52477f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
c3b94a8eff679f7003cb7cb195642dc8

SHA1
f870d951b7a411e42601c16dbc6878aba1140d53

SHA256
211b21c3a2c580d2d58e60479166093635526ecc157f68f3933a0ad4353d9dad

SHA512
00646668e12cc2ddbded97a1ad0ee59c76aefcfbdbfeb55c8be7849bc09ed998293c12c2fc690e61b1cbbb6375d8460e9d567a8df013bfdebe84c22e85bcefeb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
26871d693579b06e871fe088b0690e40

SHA1
7e9d8bc06a1087ba4b9ece336011abbe02345306

SHA256
a811cd6862d9ce4cd1251570e0a4445dbcae8178bdce898756305c652a437c73

SHA512
0f91ee24d7d59d9390e12f5efa198c9f6df231956c339695d1e4c0539941607eb2c18ab4af68d201ef7d58293b809e3eb9c8f9b6aabdd6fd6a11828f5d7e0a71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
5f2944289d60d1e28d265047347eab9a

SHA1
8fb986ab99d053a6a2ee6b0e8df3b4beb0a147f4

SHA256
359488e3a7a5bb5b7cf50c74dd0ddd5c65f9452dbae27ee7d008f5ab438927bc

SHA512
a2785c2dabd6f0391043d1d031a2d1e0f6455838716f1228a23d82cd5ebe1a3e4d2fbaa98be521213992c45f2ce57d268e92ad2927b2a2d229ce555741bc184f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
c4ebd7b91d138ac9d63f948bc34889a8

SHA1
1941a91f6cba5a373b59ac95bc830dce4d20d403

SHA256
77756c155a96acce851b652323c6824ead8a11639c0df8a2aca2de45dc6cd7e6

SHA512
e16918d150bed307795e369b43963e29e8bdb004a74df7f96f8f10404fc631d67a3648aa6a5a62a8e53c8832b41987bffecd66fe5a761cf16846fa89e6e44b56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
75f027f141bf26831a7f156a2d5de73a

SHA1
b2f7657a6483496b2e0601bccdadc511bba413df

SHA256
6a98dc94aa4a209012b87cf2c4cfec6cb1bdf02df9e936c9fe5db40502854e13

SHA512
a595db433bc45c3d4b97ea41e7b8338d54f66640a31a48491052638d87fb0f55b554adaa81ea3c6d08b4c4d949292d627914a03d43e259ea8e4d45014c140958

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
79c97bec9cd9a4e932ed0cde5ad2d47d

SHA1
8e7c0a24adf5c78d8d2152b67ea06d6c0c7fa0bb

SHA256
80b550a96e5d9f9aa71caef9283dc713d8e138e643ca4517ad11223d83fd0a71

SHA512
94757d573bbfff4dfd8a9637840af7c2b1cb45a3a43654eaa7ff789bb24952aad40f848116e1046a847ab0ec3d4d46605bec651744c6d6418fd7a286b18f8c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
11bf1df9fd84e846623a44e0335932b9

SHA1
c8b60378581f40c590a28f93579d4dcda002f046

SHA256
a1f60bbd17eee0020407918ee6540e4c0f9f370d05793e76a3e86b794539823b

SHA512
48f2d8e88d4f90dfeef6bdef6d41e6b0816755c0d51d3e24fb4a26a4eda43cad8d868d7500294b8998c919e88182b2b937f26d36c59f94460245b88cf7d22c6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
18907cc8b995ccc8ffa50f4de348e66e

SHA1
b005253624cae5049dfa01d2a83f6c5a719f6108

SHA256
3e286f9a7c336a7fec31fb80f3ce71f530091aa0ca609ac07648776225269a0e

SHA512
f793af2b5d10349b46d3a631eabd9c616fd13c9deeb21596c252c9128ca58d0ef8a2a8a045213b0d2793ab4be4b5152168435741acfcb7101f0f9daec591f227

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
caf6d02307e28cbb2663f5be158728e6

SHA1
681f0e4f0d02d5660885abd05470a2aa01745eb5

SHA256
bd55237cf5a731caa6a472ee0b139cab8b630fddc489e22137b74eb9d5d0de4b

SHA512
26e18b2fd6d16fa22ac6bce5428052362b4f3c1336c0616c37bcd82e2c34390f50ff214e53b635d52aa1fbaca1077fa4f9f61b08762326dfbc9a43f68ce831be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cfe644497f85a821856521bd8500de0f

SHA1
8d874c1f40c21e0f9c14da53f75051e4ee7b5f13

SHA256
f4933016e98c6959d51ac336b618ccf38c1d6d67ddf132af75fb37fd47e9356a

SHA512
eb6c40bcb52435e54537c352b7a8f5e483ce7a54339b4d74f2e54ebcd8f2b80e1f5f5b59a45ec3401166a3954422ed980bde6d2e5a2d491801684a3b89bc2b50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
a4dd284c98504a8632eac76295cbebb7

SHA1
6fa50f344b7fab56577b9bc393fdbd7aecc5ac7b

SHA256
1e8eff6dccaf80959e71980760a8bb147a33077bb1288a50d3f27be5a3d16811

SHA512
041886ff9f45521284a278ab8a92c964095b64604086b72f39ec9a89686ee9b3dea591fcc8fba5325485566baf4fc41ae5b2124057ef4e2d1eb12c3368b98c4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
b66581f3fc3104c6e997afa7471f3e12

SHA1
d0f391cd299209d9faca3dcd5557acf75d312293

SHA256
1ce3467023ab4fa39f5916e68105428b6a0ea9d125cd0e1614a64d8d61769963

SHA512
7b9f06cf7cf5a1279bd78f895bd73ecc5f999a3954d54489e5ca5bc5c0687f6757d10831d43989277c557bf321308095b6708bb8e28d213782d2a6aa53cefc37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
4094a71853fa29934d4f4b4b50c86882

SHA1
fa0fead6a887b94f63d47402847143ba4bd1ccca

SHA256
39bf40a236927fef9f0127a5279699e6d0e962ab0462c8b19e445ae05608735c

SHA512
58d69fb86183a6efbae44d5bdfa532a484ce87cfe04c25b8f7975329d248bdaeed1b79f6ccd209e0e3b547dfb0b4ff074d3ec3d9e03218cc2cdb586dadbcc90a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
58d268a83927c566582a3863891c4df1

SHA1
0c59270566834819fac17039078274a3e7c807d4

SHA256
362485e9e14a12140ae26fd34ba7dff91091e886a4a7f2ee81ec22127fcc426e

SHA512
ac078aa9e81746ea1240b884132c83fdfcc4679f4e86f89647ce86f1e12e4f8c14a77702bd3665b4f79131a2645bc05f59d9d1bc8dac6b1bec1b2c7cf0148ec1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
beb40619a90dd8015d54a9020fb55930

SHA1
61b17643394a19209c9bd2ff3cb60c39689ce537

SHA256
4c2bf15c17efd5c30182a85ba12419e1bdb68bd09371dee29a6d5fc895d8df2a

SHA512
b9710f17ccd9012aac86a0b3af56eec593cf141a1be1949f9fefd29b07a6ceef09d8b07d219a04180b2a5902ed351e7f19555b41363cc23603cf76fc43f764df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
24d41adb7beda56e1fb8ca40ea2ee27a

SHA1
8049340106afc681eb724c7210edce8a82003f21

SHA256
340fe9bcef09315e54db9d0ca77ea30e062c69d708909d915b945945b6f3a7d1

SHA512
ec78e38437dbce031b63ceec51454a0bc6b4866dca70c0668c045929e0dff4b69d7214f5e0cb5368ff0cd2ad0f7c6f5c1ef451fa48bbd7fa966bad428cdde6e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
eba8517f3652641367e901d3a54f7581

SHA1
fea9f4fd8d38fa53f21cebbc148d48fb07fe13c6

SHA256
2d7c268095e786a3e6c729a4503a10709df851a8899197637e6d42aa11fce388

SHA512
da857ea24ab0a1f4e1eae0a23c1b50e86c5e4c5781f9cff94eaa20127671ed5b1ed681c9b626366f155ec89e767ca11554a77f0f4c3a42c44cf821654b483517

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6f43afec3d22e815e2402ac70044ab5b

SHA1
98cc3b0a49b39bf71b94e49b4f22878d44995b9e

SHA256
270e574bedda22af97ad4a4cb5e5b4c2ddec5e37c8414ce363e9b8026b3d6a22

SHA512
b5e4975a2191160882ad2d408586a5704018c9b3e07a77c2904fd3d7279e078191bf8a8c88a8e7eac0d3f4f93ad4795b0164cbe939d5ea95a517d25d9fd9c0b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
96363636cd2643a8e99a31c9e08b7165

SHA1
2b173c9ed2b372535c157f8e769243f5d7b67048

SHA256
7c535009b8388e02a4f8e16594d8f8e93813917c990240663f520728267e20ef

SHA512
ab38fe2fb38e2f8d6b16809b3eec73cc1f0aff7c9a06d06b8b9f402093cc2b29d3a9ef845e2c90e8043178d169f9c3f60d230ce1b2c9bb86020a8bb1595103de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
16ee3a3ad579ec499a2bbf1899cfc9c1

SHA1
988d1312a9759a5f0d2166534c24ddb2ee0337cf

SHA256
923c288e6b453e2db7cafb7149b78b3945b994788136eb4638ddf4232f57922d

SHA512
f01038ad6d449523675d8590ad4b1b48163e2c72d0e4c5fffbde76a4a065d643c62b7220f3e2246b8e20c08a837adfb85e1fc3cd5471211983a3038a124df287

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
607194e690d93fd5cdfdab8db64951bb

SHA1
6e78f2e1a5b742155df95dde96ce87aceb236896

SHA256
3d6067024b1eb7a19b0e960e5fd3aaa6608c4f77f5e6a5cde489eb540ba50ba9

SHA512
ab15fa7a118565b271b4e08ea04beb32f542526c9ae71bd795e8bb663bc974deddc9137e1d13230e27c895348709f3bf790a6f88b061d841524e9ed7340f8fcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e9a67f251328be9598442faa287a3a6b

SHA1
f56f0b15c5f0ac7c1cba1139123a5cb4c0a6f9cf

SHA256
12fd2d3a32e4b30c1dcfa2c81d8a4138f4a6fd11b06ae21c473ac9db8c5c109f

SHA512
fa080397efdb9c3b4cb4ce8207a8ce23c5d5bd7f9086d29d962f55283ba1397b911022e73bfa44056f8b7846ff53d889f8c3c3fde9bd41ce1e8d0a9a53e28c06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9efc8d559f7fd8b060adfae33f7ba684

SHA1
89db8adfc4600241c8ba00ba38ff1816c8e124df

SHA256
ad1b3539a6684ef40357b4e8f12cb8f420cbe8424546f2dbc1b0310f00907c21

SHA512
37291f28a9b4d00d24af1ad084e6fae4da7c6790dadc7198f2512ad879c155c85982306beebc783dae9028d05d6c84f58dda47b9868a7971a90e96d494cd5643

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c5dddd57c92b19d14f9517394a405cb1

SHA1
fc4b5d95f0d5901fdcdd8071c3eff539d50d7929

SHA256
fbae2d81fc8a272f54e4981da7709003eef1539d7908bb0b56cb6ee491c98cc4

SHA512
73cf1b1db152fb43f99b30f5ae1b8851f2ee0093956fc5cd3f8a034897c13d27811340dd7debc034cf7804f6b602962a3eeb84a997206547be0dff293ae3c2ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
90186b4daac04437491c4c3a30c46997

SHA1
eb7245d5a8b149c352ca2e3d51d8497e9c7d23a4

SHA256
7c4c970c60b46c934cc55cd450172a0ef2fe5fe8a4f558b27ed0450b60d70ef7

SHA512
eebe9970d6186129a1fe1115a950f01d8dedaea24a8182fb9abcbc25482e9d1e9f1e9c2e369c8d8a028a91aaa50a3086e671f71bad79255af22d0d4d0a3ed735

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
78f292ce5d22c312b3042229bf33bb77

SHA1
556c0cc411d49e78c80b2f4b659650bb47148b20

SHA256
542d5f5f9f028d17377b40b5c9b41fbe1f2b88486000654c6a78ad24975029fc

SHA512
6666780abcec48889dbc7e1d300eebc379db5c9a92d0e9ed4e042ce32e358b6d0c0ef93990427f89667f2d29bcd4274b84ee46440a2859d46ba13ec2d6524f70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1c4d01026b1e060911fa2352d5eb1225

SHA1
4bb6b7bd956957978cd902bd476f1918687163cc

SHA256
a5ac3d37dc503a2b1663bae14020cd84d9da60881d8e621dd57cf9bffc5d4825

SHA512
8312f32be038ebf6b3ba98092c60ce9d9a84a83e1804f609087f42874adbf947b6726dbfedc363ccbfebb5f7a35ffcafb84fe233729840b207477cea2195dffe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
b0f4dea97d6f4cf0188cba8b5a2b10a5

SHA1
f7089bda99740e18771ffc7e4e9718466f6461e8

SHA256
431a938c4125be12c340e87a40556ee204393fd54d3b5829d81912d0afcb52ca

SHA512
c2fc9b3fdaae08419e5bb62ad9ba4eb536f5438116f7b55ccf80bb08500db052321335f9f356305ea3993f19aa86f7d090f871c096211400ae268f2e07d2adbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
1b8d22cb64ce510c8c0f377cdb6be1b4

SHA1
d20113da3a73ebf1a29336d4ac7ad07d4668f8aa

SHA256
a07954ce910a7a91453b55bfd142af8fd786609b1488e925ded9557b91075039

SHA512
8ed7bc518ce75553144478c703a26e2324ac108583f43866cb357c4aa0aabb970d03e79f5dfdf259f28368912effcb84bf8ca1b05ebb903806332e5c1f5e9ff1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
75d47ab77c35fb5f0e80e7cf29240b24

SHA1
e0853bd0a1ed68a15a843e17882aac92a7704f60

SHA256
bafdba63b5292ac2580f5668c7897abe46e18d1869caf874e6f75aa2ba9f2ec0

SHA512
4baa940d96aa358e9519962041907d30d9a38800cc0ffe5d83eaba0a06c38ae18c10ee10a85ed842556c0f8e53441494583db54c408994d78b36eeda9968f299

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
cb9ba00eb119dec2ac991ab3aeeb080d

SHA1
c508d8a3bc0eeb39d9d634364b15d00b97eea653

SHA256
da6fb966ec461c87b51f9327010d5f4066be543b916822ab167bfa0099091dfe

SHA512
6b259235186ad94643317b978edc257a56719d5b53ced9b11e15703ac1682662be5ad6186a6fa312d5b5fdf5d2fe69c5c01463398e7ec610be3aa830afa7bbd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
01c6a217d884936c838710ad0428b616

SHA1
22189448155415f33e063dc0cc7fc83e676ca2aa

SHA256
70781121055ea6907e38060afb4490322852395ccc7cf31d9c3b141b0dfcb228

SHA512
309258ec4d3a9166b66d3dba67ceb7e8e11de8c8300b9f2d8f131768fe14b74655549adc6fef5d25d4ad293735f93d526e42b29f355a7d086cd7955b9cb51906

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
33540297dc6a088f6fb93379bd56ce75

SHA1
eb218a4d7b32d526d451aea8e12028e3530fefa5

SHA256
3c45a9b56b307162643407d4b139ad78a6244be3d479c768b74965ba8ab6c011

SHA512
f35dedbf6a478a77de71d5ec502ed70c493850ab00de80456d6b204e53b62b32c1780ce441b76a20be4394cd3e292fe218f4da8ff67703c69b61d6a1072845a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4e07c284864af64422395e3f7291892c

SHA1
3d424131583710838770d49f94b24d656a7bfe27

SHA256
119f881eb938e71865b2f55828451e6f2f97cb6bae4673bdf54324830ba57330

SHA512
f3cf6af88da74a11bc6611a918c3064c1577c557ff3ef3efa4cc04bdfde6292a5c24c7d0ac544140d28beb6cffc2e5c6a8a9f2af6dc206749b6313f736030559

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3fdcf7860c5158c112890f90be695192

SHA1
144b54ea2df221f421ebca0d8fda1d024638bd5f

SHA256
9de123d6fd6ecfe8d280ba44114d6885763ce37b8e21c4c2078cf57a1cd949da

SHA512
1356c04f081c1d88f1b19a734c9f8ee0782873b585eb08adffbd619152b6a7669dba35dd409b2648397ae1916d9c64dbe4b3ec932da86afd9974a16a6e824acc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
3befa0f5d690d2682e364c2911d30cb7

SHA1
79369308fe7f895c9e8ba09308c95f05530cb492

SHA256
d9ab7f15d49f5685b23d4ec268f2672622f88d4426c8da5d2e9b07f7fe099618

SHA512
e53a09f8e6f8fbe1aa534458a2e0032a333d26bc31061f35d5f8ed971d60115b7eb2d70f2845675f98d35bbaa9c7271274c46aa31c11746245d40b7c062d93f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
3c47919808d8ee9769f28802ba852031

SHA1
1ed757e49281f3b9ef1675c5c5be8d0cb7279555

SHA256
0ddae3b8820be2e456244e3872a75aba5bb80165e596b7ddb100cbaa6405f7a9

SHA512
289dbc97ac4800fadf69450a88212be6abeb0576ea750072341c62af1bdc4c49488e9ea6a3dcc01eaf11b5db8213d0fbfed5030784c5047f66fbce9097ef19dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
0721542cdb1fab81dc60c3a99acb5e55

SHA1
25356aedfa4152c2e44a9681451409b46fa84f72

SHA256
002a5baa2783ba2db6f64b4193e05032df78cc017cdebb30cbcc447e250e8002

SHA512
3b76aa9ef54b8a9e7bc4c8e63d5c8e7f6721ecbdc2c48a455c2a4d6e36e1c6ecd0c8483a0dea6f66a686d0d395a0cd5e72159a90956a68912a89d6de6e72170d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
6b1651a7c819623c6447c8010aa63bbe

SHA1
8efa879021c5931a1066ecb5c6b6f169d02a7313

SHA256
5205df063a647849ee9bb3638f5198c975a8bdeeedee025406a0a2a95977ed67

SHA512
817858548f884a7b3d67072fd4e0c80807258de8e832d967e41a4acd91032333b326428e3303b6d3663c1ab82ffe3f38fc60f522acf3d83eb5d7bfa7bec5aa8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
4a9ef3ef92abb2374a3d6d793b4ebdab

SHA1
6b480630c8dc69321ad23ced938d061c64f3bc7d

SHA256
ad9e4226f45a1c12a44a4d4ee9121804bf8c19ef696fcc7d3c607b4408193d90

SHA512
eac600598127a69efba491d52d8c7408203ea1a77d27a3c5f4d614ec668b93708e26e2ba95d21e34df72490bb6ec707aafaae7bf8d4987f6459639b7a98763f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e2a3efdadfb128519a61831f3ce1cbf8

SHA1
ac6808c0dfc2572703c753dc3b3b81824c46c766

SHA256
d7e909fdda57d607959e872ba76fb54f34edca7f59f2960be7b09ff3275fdc0d

SHA512
2aa9e50cd463ea9b18c4a2c65d6597d245e4082589d03b89b09d402355b8733d195a0e3d3fc731c69b6c6a22cefb41513181b2ecd0b406298aedf9834904ec33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
a9cc029baddb02ef95b0c8ceb988e18e

SHA1
da629fc020ca375a88363251bbeab6d35cb3c61c

SHA256
f8739eb4624a251686a4c0f296b4d60ed23d2153a18e59baa4c0b5b95e6a3294

SHA512
214479ff35edf3874ac2ee5e72f5c84d4e6d26ce58ceeb25387fc597afcf168a62c00dacdee144a8bb1aa6546e9ae48706fceefa29a5f677daeb2e2aaa24c1b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
e4a8be7010855cde4d03dcef7957cc56

SHA1
9b17eaeb530a65da91372cd29576d607b909e291

SHA256
f4cc9c55f36b9feb658af89c186f0ff38a8549cfd105fcf80ebd0eb09ef8b411

SHA512
7f67328eba501d8e2f74141bd19d3157f72a14e9988614ebb11cf5379651ede19197fb72ca94dd57613d8e19f253a5efde1365827172ecadccb37bdb4af9d26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
2749c9d2c1dbc4c22e8e8304f442f196

SHA1
ec2466c6e476ac43216ca184c7def64cbb6ce08a

SHA256
047bb6eecb01e723707be2a36528801843341273aa44e97e0250f0cc11233ce4

SHA512
fbfb3186f0d62650e58d30e28f0e90d249038256c416d9f05ad8659eec0104f7ace3c5e45c7d709422579aad7d854bceb17f911320e5c86df1fd0b95d270b079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
c9b46dc73b767206a1c34ff7a58c90db

SHA1
f5aba30dd5e73b6ae6cec291458fa554e4401359

SHA256
6c7dbb8b88b5fde243919c81e71c5d89733e63c48c4cdc6a378b2902ab47dd81

SHA512
08aa2e9b25baa35816b3a428cc9f21d630897119af5ea139f156a2ac27a41d582f8f7e92ecd03a48e7981f8fa693903421f86a33f2671923186069e7ab0369be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a67bdecaaf34c3c797fdf3e6f46f8252

SHA1
fe7fd6dd065d1134db71050db5e70dabdfdcfc25

SHA256
de82d8441e25999cf75b5c3a7f5a6c95da0c049ec0501f1228148648ea77802e

SHA512
4bb10c658c3f350ef36cb9e5ee134fab614183e19af86769a178d7e817e4498b3806609fa34e9a5b61cc993239ab927d23bd034410d50ba7eccded901b12618c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
37ffad97d44467bb3c35a0de031e4794

SHA1
e8e7308fa269b529f2a04726fcf1bf452ae3e195

SHA256
150c05f876ff99a2fc6499894d61b3304d6a426ee624c3f8cb4164474d74fbf3

SHA512
fcafb4b29722f537df401792c709b8abc6672a3259b0c732db462534b6cae4e79dcc33648ffaaaba612017337474a377810853d2980307f0552a46c67f43ddc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
51ac3e7e9980243d8a2bfbf9a0fa11b5

SHA1
83a52f3c0d781f6991656e683c33dd379321bfe8

SHA256
f89ffed5eb1f52db5bad5567af0f92a9e4e6dd63dddebd5887c42a3b365f3791

SHA512
86c1db07ab371dcc29883e8a34b6aa72f3b457269a9052cedd5afed9a042ae8a082b52e84eddc3351c470c7ea42a8c91d24dcf603d2faaacb2598f233fd689f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d7c8bbd3ca481393cc4e28fad023fe63

SHA1
f9437ecabcd35d3cb9e9f3d100eab9bb9e9620c9

SHA256
bfd058327f9314bd268d2dac35a25418598853202135fdbaffa3b7f78e7ea3a1

SHA512
7b02a44317fd530e19f58c86af975a7f03d2d9d8972df54c10e9cec953d75736e380a538ad9b7ad7f2a0e4ba83c933ccf6658d30c39dec9d69753802281ad52e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
c2ed68283fa319b1fbd52efe66089d70

SHA1
7b586ac1fccb127d88af7ce8787dc69653e1c37f

SHA256
3f6e51dd3e9a3ae1afd4f4756a7db8dd9082376c86797bf38ed244472b7e02d8

SHA512
32393b3939f6b8f22aac3cddf6fec566e9499c26a329664f5df98cb830f1bf70362cbeffbfddfdcd7742b632fa0e8ec26c1c55bfa230fe7524e51069dc646b42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
f7ce8552a4dfbc375d9e5edbe1687cc1

SHA1
f2559b3c3342559b913b3b5ec0e7184d77ef1912

SHA256
96f99b8fcce470c056604f45a5f8b2b01a474e574169e5d69104c991867a0c52

SHA512
58e23563a435ccd6cd1d379980c7cc99642304a4dd4bbbddd66b2ca761f6e4590dfbf97f9b3737c6abdc25ad831a83231235aeb21d72b645b2be411ad5c66901

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
5f6096b5a3dede94061a1441b593a740

SHA1
3ef0d2afde6d8858fca36cfdc1404cad0ccd983a

SHA256
de47344578de15c974ac275bb7b80a573ebf944a701ce817b6e658c4a66f0505

SHA512
a2ad64377a65f5758ab21c001363bee9d5c7bc6a8b64b5f4f25149889cb4ca0e332a8797231b537d1dfe6de1b617c114c672a76956227b58af6e392cdc045526

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fa9564d60d90ce0c3a1eb7ce45ed573f

SHA1
822c645e3c97e110afdfdd1fbe366264cffdd392

SHA256
30eb8fd8e6167dcc93e002d3fecb532d18bd5d1a5dafd4313613ba7350c33caa

SHA512
a52b38229c8911a8cc7e9b387ee20b6fddf56ac12c1dd0db8118c8a16c1fdbd3fad955a8ee3ded9a917e99ba25bde3784aa3310ad509669a1b495b46bb733d80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
c4b51de3e7d717b10410a7716bd38fdd

SHA1
fac3a872073cece03e8ce1016ac792937408cfdb

SHA256
0af38541faec88c6e3a7447dcd4bb7ca7ff0141984c2ec24d39fce4e22101f8e

SHA512
7adb101107a90a1693431be66e3be91a563fbc94a83439cc45ab3e8b4553416b6a1f2f7202cf89bcd8249194101807a3d1ec9dc3107bdb7b325df724729170ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2ccc95e1b17f5aee5d73683c3b613c0c

SHA1
02a0470ffeaa85c0b34893ae2739025090b006c3

SHA256
dd319a9ffc26fec07916daf8d90cc6e05ab55b3ec3094f0a6084ae7c6be913a7

SHA512
341cc18af9f63791c4ec624c31304077a5d320b28d78afdecd4dc8dfb4c17c421349d9dbc35555e0e90ab7f9db1cb9df744855b2c5bf1887dd8370672a933447

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
79e076e8726d48f6eb8714936fc3d73a

SHA1
6051650501490c6920acc10f6a295f8b1e99e893

SHA256
66dae462dedb3a43476f559c30c329764ede9a2813108b3b3be036b4774bbb42

SHA512
9534e0b985b03893aedae9478df9f4228d18299bb00bc0df08e00bc8033a46cd63f1816ccad7da90789434cb3b086711b442eec6d5588fb70ddd7d8f7c7d07b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
09caaf56b0a14d9183edfe2a04dd3140

SHA1
069ba13c6ac589f14978424680d31209134b27eb

SHA256
d54d75269c27c9403fc7f3d0c61d9abe63d9ba37c3085f3ff6af13b587372929

SHA512
b995818f88bc508636fe84fed5c52151a6f49aaa28a1b2b300f112c9f7ab3672ba57b4a4ef70916962cab9644621b8f0119c38edff77e12031a63d357a5516d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe589f96.TMP

Filesize
204B

MD5
46e304b1b325e083471593ccd65a9e82

SHA1
7539639ec8a930f763fdd9fdbd8e7d5bb850a332

SHA256
7d1a4ee1834483ae9ba710e069b6cf1416679e15b5bea894a242608254034bb6

SHA512
646106626268785502e81e229f43aa476bb8b86270136bae55a815037f25e97b45b2b5d9929e42a368f0040f0014d2402319636a649fdac2c84fb32c5aa4f8f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9da627dcb4c9f5734df43ed287f141e4

SHA1
ecfdc73dc90b8b6ae58ad1ec6d3336cb3569be22

SHA256
62e1fbf2a9ef6f595a2b7382ec2629587cd87447bf005616023e37277b2b6049

SHA512
f1a5582c3b8ea75b979578e45ff0b52ecffd7531f281f3ad5f44e4959321ee5de67053781c00ca678f07aacddeff1dc33a087cfd1a5df7a0ca62f5dccd64515a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
b134d32740be585041ec6c831eaec873

SHA1
e501b082695b507f955ffad86db4dc9f9f16656f

SHA256
5bb0db32fcde7e857944cb6c3ec5823cf50829e5ff2b849d21ff744d2d9789e0

SHA512
28bc6dc4708fc8e9cc2738fa3233c04a04a91732abee886193be4c94280e88aadabd809e9883c72baade0fc3104de727412e42de098a0eb470ae440598f8b6ad

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 419417.crdownload

Filesize
78KB

MD5
ef8b04b617ece592b13b0b92ce713bb7

SHA1
f3edfedc351352d0460cf7ffbba1f0b195e56f33

SHA256
c90e3f3f870668887c6a5dbfc49ddaba907bc1ea0c0966ad6249ff0e3eb9869e

SHA512
d4d05132622560b506e854aa3798da97379e742f6e3f9d012505621bd28f4b5b2102e555fdf10008f44e4d82f7d07e66c1f2b26e8e238faefebc15f7b963f0bd

Download Submit
memory/440-2863-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/3460-2835-0x0000029C77640000-0x0000029C77B68000-memory.dmp

Filesize
5.2MB

Download
memory/3460-2822-0x0000029C76D50000-0x0000029C76F12000-memory.dmp

Filesize
1.8MB

Download
memory/3460-2823-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/3460-2864-0x0000029C77100000-0x0000029C77110000-memory.dmp

Filesize
64KB

Download
memory/3460-2821-0x0000029C74780000-0x0000029C74798000-memory.dmp

Filesize
96KB

Download
memory/3460-2824-0x0000029C77100000-0x0000029C77110000-memory.dmp

Filesize
64KB

Download
memory/3460-2861-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/4484-2862-0x0000021FF0870000-0x0000021FF0880000-memory.dmp

Filesize
64KB

Download
memory/4484-2860-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/5496-2837-0x00000277BAC60000-0x00000277BAC70000-memory.dmp

Filesize
64KB

Download
memory/5496-2836-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/5496-2834-0x00000277B8F80000-0x00000277B8F98000-memory.dmp

Filesize
96KB

Download
memory/5496-2865-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/5596-2848-0x000001C917EC0000-0x000001C917ED0000-memory.dmp

Filesize
64KB

Download
memory/5596-2847-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/5596-2868-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/5596-2879-0x000001C917EC0000-0x000001C917ED0000-memory.dmp

Filesize
64KB

Download
memory/6104-2850-0x0000020C3AFB0000-0x0000020C3AFC0000-memory.dmp

Filesize
64KB

Download
memory/6104-2849-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download
memory/6104-2869-0x00007FFD89100000-0x00007FFD89BC1000-memory.dmp

Filesize
10.8MB

Download