54c4159bb93087ced7b67bd3b225d3b1f71364ba0c79cea4afcff595c45021b0

Analysis

max time kernel
714s
max time network
716s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 04:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

launcher.exe.1716030012.exe
Size

2.1MB
MD5

8dd9c7d3a482ae675bc097a15c690b97
SHA1

49f6ddac9e717a6c46dde9f387035717f5729a4a
SHA256

54c4159bb93087ced7b67bd3b225d3b1f71364ba0c79cea4afcff595c45021b0
SHA512

af85db8c231ed35972ec42652f0db4b9f30d81960bc070369259093b26450543de5674c79a062a357ba7f07e43aca94c54cd3c1e9748e6d5cd16b866c82110d5
SSDEEP

49152:G/CY2kwMsmax42UWpt7yqvYceFGw2Ilwol11:/b7yOeF7l11

Score

6^/10

bootkit discovery persistence

Malware Config

Signatures

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	MEMZ.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\devmgmt.msc	mmc.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 59 IoCs

description	ioc	Process
File created	C:\Windows\INF\c_cashdrawer.PNF	mmc.exe
File created	C:\Windows\INF\c_camera.PNF	mmc.exe
File created	C:\Windows\INF\c_media.PNF	mmc.exe
File created	C:\Windows\INF\c_scmdisk.PNF	mmc.exe
File created	C:\Windows\INF\rawsilo.PNF	mmc.exe
File created	C:\Windows\INF\c_fsactivitymonitor.PNF	mmc.exe
File created	C:\Windows\INF\c_ucm.PNF	mmc.exe
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe
File created	C:\Windows\INF\wsdprint.PNF	mmc.exe
File created	C:\Windows\INF\c_fscompression.PNF	mmc.exe
File created	C:\Windows\INF\remoteposdrv.PNF	mmc.exe
File created	C:\Windows\INF\c_volume.PNF	mmc.exe
File created	C:\Windows\INF\c_fsopenfilebackup.PNF	mmc.exe
File created	C:\Windows\INF\c_magneticstripereader.PNF	mmc.exe
File created	C:\Windows\INF\c_fscontentscreener.PNF	mmc.exe
File created	C:\Windows\INF\c_fsantivirus.PNF	mmc.exe
File created	C:\Windows\INF\rdcameradriver.PNF	mmc.exe
File created	C:\Windows\INF\c_fscfsmetadataserver.PNF	mmc.exe
File created	C:\Windows\INF\c_fshsm.PNF	mmc.exe
File created	C:\Windows\INF\c_extension.PNF	mmc.exe
File created	C:\Windows\INF\c_mcx.PNF	mmc.exe
File created	C:\Windows\INF\digitalmediadevice.PNF	mmc.exe
File created	C:\Windows\INF\c_sslaccel.PNF	mmc.exe
File created	C:\Windows\INF\c_display.PNF	mmc.exe
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe
File created	C:\Windows\INF\c_fsundelete.PNF	mmc.exe
File created	C:\Windows\INF\dc1-controller.PNF	mmc.exe
File created	C:\Windows\INF\c_monitor.PNF	mmc.exe
File created	C:\Windows\INF\c_smrdisk.PNF	mmc.exe
File created	C:\Windows\INF\c_fssystem.PNF	mmc.exe
File created	C:\Windows\INF\c_fscontinuousbackup.PNF	mmc.exe
File created	C:\Windows\INF\c_holographic.PNF	mmc.exe
File created	C:\Windows\INF\c_computeaccelerator.PNF	mmc.exe
File created	C:\Windows\INF\c_fssystemrecovery.PNF	mmc.exe
File created	C:\Windows\INF\c_processor.PNF	mmc.exe
File created	C:\Windows\INF\c_proximity.PNF	mmc.exe
File created	C:\Windows\INF\PerceptionSimulationSixDof.PNF	mmc.exe
File created	C:\Windows\INF\c_fsphysicalquotamgmt.PNF	mmc.exe
File created	C:\Windows\INF\ts_generic.PNF	mmc.exe
File created	C:\Windows\INF\c_scmvolume.PNF	mmc.exe
File created	C:\Windows\INF\c_firmware.PNF	mmc.exe
File created	C:\Windows\INF\c_apo.PNF	mmc.exe
File created	C:\Windows\INF\c_fssecurityenhancer.PNF	mmc.exe
File created	C:\Windows\INF\c_fsreplication.PNF	mmc.exe
File created	C:\Windows\INF\c_linedisplay.PNF	mmc.exe
File created	C:\Windows\INF\c_swcomponent.PNF	mmc.exe
File created	C:\Windows\INF\c_fsquotamgmt.PNF	mmc.exe
File created	C:\Windows\INF\c_fsencryption.PNF	mmc.exe
File created	C:\Windows\INF\c_receiptprinter.PNF	mmc.exe
File created	C:\Windows\INF\xusb22.PNF	mmc.exe
File created	C:\Windows\INF\c_smrvolume.PNF	mmc.exe
File created	C:\Windows\INF\c_netdriver.PNF	mmc.exe
File created	C:\Windows\INF\c_fscopyprotection.PNF	mmc.exe
File created	C:\Windows\INF\c_barcodescanner.PNF	mmc.exe
File created	C:\Windows\INF\c_fsvirtualization.PNF	mmc.exe
File created	C:\Windows\INF\c_diskdrive.PNF	mmc.exe
File created	C:\Windows\INF\oposdrv.PNF	mmc.exe
File created	C:\Windows\INF\miradisp.PNF	mmc.exe
File created	C:\Windows\INF\c_fsinfrastructure.PNF	mmc.exe

Checks SCSI registry key(s) 3 TTPs 20 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\	mmc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	mmc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	mmc.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133607396585273595"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	MEMZ.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	calc.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	calc.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	calc.exe
Key created	\REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000_Classes\Local Settings	calc.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
3696	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
3040	MEMZ.exe
228	MEMZ.exe
3040	MEMZ.exe
228	MEMZ.exe
228	MEMZ.exe
3180	MEMZ.exe
228	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
4560	MEMZ.exe
3040	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
3040	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
3180	MEMZ.exe
228	MEMZ.exe
228	MEMZ.exe
3180	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
3040	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
3040	MEMZ.exe
3180	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
228	MEMZ.exe
228	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
3180	MEMZ.exe
3040	MEMZ.exe
3696	MEMZ.exe
3696	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe
4560	MEMZ.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
5192	mmc.exe
4248	MEMZ.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 61 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
1532	chrome.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of SetWindowsHookEx 52 IoCs

pid	Process
4724	mmc.exe
1012	mmc.exe
1012	mmc.exe
5016	mspaint.exe
5016	mspaint.exe
5016	mspaint.exe
5016	mspaint.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
6280	mspaint.exe
6280	mspaint.exe
6280	mspaint.exe
6280	mspaint.exe
4248	MEMZ.exe
4248	MEMZ.exe
6548	OpenWith.exe
4248	MEMZ.exe
6872	OpenWith.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
3684	mmc.exe
5192	mmc.exe
5192	mmc.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
7624	OpenWith.exe
4248	MEMZ.exe
7880	OpenWith.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
4248	MEMZ.exe
1368	wordpad.exe
1368	wordpad.exe
1368	wordpad.exe
1368	wordpad.exe
1368	wordpad.exe
4248	MEMZ.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 2280	4116	chrome.exe	101
PID 4116 wrote to memory of 2280	4116	chrome.exe	101
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 5064	4116	chrome.exe	102
PID 4116 wrote to memory of 2044	4116	chrome.exe	103
PID 4116 wrote to memory of 2044	4116	chrome.exe	103
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104
PID 4116 wrote to memory of 632	4116	chrome.exe	104

C:\Users\Admin\AppData\Local\Temp\launcher.exe.1716030012.exe
"C:\Users\Admin\AppData\Local\Temp\launcher.exe.1716030012.exe"
1⤵
PID:2924

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a6cab58,0x7ffa3a6cab68,0x7ffa3a6cab78
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:2
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2156 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3104 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3124 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3704 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4540 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4688 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4696 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4708 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4700 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4956 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5068 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4408 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4496 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5200 --field-trial-handle=2036,i,11428607130071397647,2779474361214700987,131072 /prefetch:8
  2⤵
  PID:5116

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:4052

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3128

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe"
1⤵
PID:752
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3696
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4560
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3040
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:228
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3180
- C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe
  "C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /main
  2⤵
  - Writes to the Master Boot Record (MBR)
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:4248
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe" \note.txt
    3⤵
    PID:4836
- - C:\Windows\SysWOW64\mmc.exe
    "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
    3⤵
    - Suspicious use of SetWindowsHookEx
    PID:4724
  - - C:\Windows\system32\mmc.exe
      "C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
      4⤵
      Drops file in System32 directory
      Drops file in Windows directory
      Checks SCSI registry key(s)
      Suspicious use of SetWindowsHookEx
      PID:1012
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe"
    3⤵
    PID:2260
- - C:\Windows\SysWOW64\mspaint.exe
    "C:\Windows\System32\mspaint.exe"
    3⤵
    - Drops file in Windows directory
    - Suspicious use of SetWindowsHookEx
    PID:5016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    PID:2848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:4704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
      4⤵
      PID:4500
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
      4⤵
      PID:700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
      4⤵
      PID:4740
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
      4⤵
      PID:4312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
      4⤵
      PID:3208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
      4⤵
      PID:4144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3772 /prefetch:1
      4⤵
      PID:1356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
      4⤵
      PID:1396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
      4⤵
      PID:5216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
      4⤵
      PID:5344
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
      4⤵
      PID:5352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
      4⤵
      PID:5524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
      4⤵
      PID:5532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
      4⤵
      PID:6004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
      4⤵
      PID:6112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2716 /prefetch:1
      4⤵
      PID:2200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4040 /prefetch:1
      4⤵
      PID:5380
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3652 /prefetch:1
      4⤵
      PID:2924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1
      4⤵
      PID:4612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
      4⤵
      PID:2436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1
      4⤵
      PID:392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6404 /prefetch:2
      4⤵
      PID:5912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
      4⤵
      PID:3928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1
      4⤵
      PID:1304
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
      4⤵
      PID:2656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
      4⤵
      PID:1440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1
      4⤵
      PID:4408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
      4⤵
      PID:5984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1
      4⤵
      PID:5704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1
      4⤵
      PID:3588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
      4⤵
      PID:2244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1
      4⤵
      PID:3628
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7540 /prefetch:1
      4⤵
      PID:932
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7576 /prefetch:1
      4⤵
      PID:1612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6780 /prefetch:1
      4⤵
      PID:6072
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7800 /prefetch:1
      4⤵
      PID:632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7456 /prefetch:1
      4⤵
      PID:6884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7392 /prefetch:1
      4⤵
      PID:6976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
      4⤵
      PID:6644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1
      4⤵
      PID:6608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:1
      4⤵
      PID:3592
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1
      4⤵
      PID:7012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1
      4⤵
      PID:552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7984 /prefetch:1
      4⤵
      PID:6132
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8592 /prefetch:1
      4⤵
      PID:5692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1
      4⤵
      PID:6892
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8704 /prefetch:1
      4⤵
      PID:6580
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9156 /prefetch:1
      4⤵
      PID:6824
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8460 /prefetch:1
      4⤵
      PID:4320
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9132 /prefetch:1
      4⤵
      PID:5264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9092 /prefetch:1
      4⤵
      PID:3468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9484 /prefetch:1
      4⤵
      PID:4992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9312 /prefetch:1
      4⤵
      PID:6116
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8976 /prefetch:1
      4⤵
      PID:7196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9532 /prefetch:1
      4⤵
      PID:7208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9648 /prefetch:1
      4⤵
      PID:2156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9752 /prefetch:1
      4⤵
      PID:7700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9240 /prefetch:1
      4⤵
      PID:7856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,2629985491167401901,5781548456891455198,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9308 /prefetch:1
      4⤵
      PID:7704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
    3⤵
    PID:5928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
    3⤵
    PID:4124
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:3068
- - C:\Windows\SysWOW64\notepad.exe
    "C:\Windows\System32\notepad.exe"
    3⤵
    PID:4964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
    3⤵
    PID:2580
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
    3⤵
    PID:3960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0x100,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
    3⤵
    PID:5356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:4508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
    3⤵
    PID:396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
    3⤵
    PID:6108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:4624
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe"
    3⤵
    PID:324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
    3⤵
    PID:3112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
    3⤵
    PID:5612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:2136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
    3⤵
    PID:1900
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:4824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
    3⤵
    PID:5324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5260
- - C:\Windows\SysWOW64\mspaint.exe
    "C:\Windows\System32\mspaint.exe"
    3⤵
    - Drops file in Windows directory
    - Suspicious use of SetWindowsHookEx
    PID:6280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
    3⤵
    PID:6816
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0x11c,0x12c,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:6832
- - C:\Windows\SysWOW64\calc.exe
    "C:\Windows\System32\calc.exe"
    3⤵
    - Modifies registry class
    PID:6472
- - C:\Windows\SysWOW64\calc.exe
    "C:\Windows\System32\calc.exe"
    3⤵
    - Modifies registry class
    PID:6740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
    3⤵
    PID:6484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:6472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
    3⤵
    PID:5732
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:6276
- - C:\Windows\SysWOW64\mmc.exe
    "C:\Windows\System32\mmc.exe"
    3⤵
    - Suspicious use of SetWindowsHookEx
    PID:3684
  - - C:\Windows\system32\mmc.exe
      "C:\Windows\system32\mmc.exe"
      4⤵
      Suspicious behavior: GetForegroundWindowSpam
      Suspicious use of SetWindowsHookEx
      PID:5192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
    3⤵
    PID:5492
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:2748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
    3⤵
    PID:6776
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
    3⤵
    PID:7048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:3648
- - C:\Windows\SysWOW64\explorer.exe
    "C:\Windows\System32\explorer.exe"
    3⤵
    - Modifies registry class
    PID:5196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
    3⤵
    PID:3124
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:6664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
    3⤵
    PID:6212
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:5228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
    3⤵
    PID:5196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:6588
- - C:\Windows\SysWOW64\calc.exe
    "C:\Windows\System32\calc.exe"
    3⤵
    - Modifies registry class
    PID:7568
- - C:\Windows\SysWOW64\calc.exe
    "C:\Windows\System32\calc.exe"
    3⤵
    - Modifies registry class
    PID:7840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
    3⤵
    PID:8136
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0xf8,0x130,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:8152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
    3⤵
    PID:7588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:7600
- - C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
    3⤵
    - Suspicious use of SetWindowsHookEx
    PID:1368
  - - C:\Windows\splwow64.exe
      C:\Windows\splwow64.exe 12288
      4⤵
      PID:7024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
    3⤵
    PID:7780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa3a9946f8,0x7ffa3a994708,0x7ffa3a994718
      4⤵
      PID:7808

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa3a6cab58,0x7ffa3a6cab68,0x7ffa3a6cab78
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1612 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:2
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1972 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3076 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3116 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:1
  2⤵
  PID:728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4356 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4516 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4652 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4608 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4872 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4536 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3504 --field-trial-handle=2416,i,5521629667998075440,6351750271164955487,131072 /prefetch:2
  2⤵
  PID:5428

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:4744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1236

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4604

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f4 0x4dc
1⤵
PID:5860

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:6388

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:6548

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:6872

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:7624

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:7880

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:7272

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
ead5c5b65992ef68cf2eb90edd0f8846

SHA1
e23f95767614ce9830147ec6ba7b0b5ca18a8101

SHA256
be7c1faec23a46d25250554bdeb10d8f49b4fc3176004c914f34cd0c8caa990f

SHA512
043645f254ad57e33e6968a60ad645630ca980de7555b410631fbc597bdee7402e1f4b15e7d522537f01304ca08400fd58a69609a125e7440dfa3f1bb33d1077

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
cf49ec76c4668185bdb8a4c022abddeb

SHA1
ca55e612f5c8037dbb0d2a493e1e64ee207f72cd

SHA256
0ba4ebe187d724dad1af9d1e6b2456d1b039018394362d6f6e8051a02f889ae3

SHA512
953d23f5b1f3e779bae09e59b4a8f12c6a6d9437775f269c4db63f5a3af4f92f4c709fcccc6ef670f12e9e024d972c808770e9ce88a75ad202c1843d2b19c36a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
88deabf3e04f5e8358dcff28f517e7f6

SHA1
556425f4707ac5276e389184bcb42e90a5c965f8

SHA256
f0ce2eb71d45440d9c34f028dfd1a045459223278892576dd477fadde7c0af51

SHA512
baf822ed0ecbcd29b287967f15124d3f5780e6c1dae99037967459cc6ee533fbbed72f64ba286dcd458f7e934ee534a62d50eb64567b670e85d7f6c611f0f9f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
b06c33ade45e5f3a24dd45a20bd6b61a

SHA1
814cbf9d06a31cdf5e97e7edd323161b7b90ad20

SHA256
5685a9d6deddcf534fc05cea9cacbc8a16bc08c6367adee8e44426cecbf9f902

SHA512
4d5b9b488d931bedf4326ae7ba34936450b7944f00ca6cc92cf6998ed40758e8d85a998e238bf7dd43b7d2e1dac2089db30e8129aacf0c92e3d8e566cebce366

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

Filesize
4.0MB

MD5
b53178dede63e55302a755ddfdd37154

SHA1
9b155f02446f6caa0a3624099c3f14fdec1b95d7

SHA256
6cd2c698392e8b97a5ae4510edd1fa31755b809cd17c19e00c1e3819402b19f0

SHA512
f5b3606bb138efb1a8905a41eb95bc529939b1708148ccd87802d1714ac8d0b1d46270a962d71196bdfece30596ad4858dab7ebd1383c80ec3a65b00a53223e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
34KB

MD5
aaaaecfa62265018a2848bbc72f4e2ea

SHA1
a9858b00dd6816687b22dc1940f9ede4215353ea

SHA256
fddccde09074565f4f7e2ee3f9f4246c14775faaee196b000cb5f0c5e79f80d6

SHA512
9c8909d091ae5ef3965d8afba67de69b1c01f36e9a19e2a5d8eccb6c006740b921a6968f2adb7836c367d4b7a67f14012cab76447ee0a0152a31271398661116

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
59KB

MD5
4fcb5d51c31760c835a1d4fe56d2bc9d

SHA1
2feed203e6e3fc7b95bcca811406447ee130615e

SHA256
d43dfd1393d972d0a3e8857b325281f8af76107ccbe1131efcd5afed0b0f98d3

SHA512
1948104832d86ac4f9bd5a773ee10f682600e8c2634c3128d68058bd99060c95a78a3833aac4118698bdc69ec6cc18c197e6d7b16b6a504e87affe5ea094660b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
64KB

MD5
c4133173e7880983fab8babbccd7b123

SHA1
59f8327bd9d74b8d1fe7b9febe2e03694caf497c

SHA256
d270187bce8766a459b8eab16519f718afdb014bde0a59d7b62ba9de9f9d1956

SHA512
95031550c2c5ec9031a898c9e5733981224ccdc198dc28305f2176e3189433d41852e738068914797f77cda60c462476b90b46ad0911b03020d2dc709d29a6da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

Filesize
91KB

MD5
36614764407badfc92fbc690b17ccb8c

SHA1
bc80b1176fa809e6f74e10dcc4553dfb7b9f3364

SHA256
48b53c2cd2d6d1d276784d23e0469bc6e3bf379ffa6907589c52bddfee7da593

SHA512
fe53b1b2887810aa842f88b5840161f406c13ad9ccfb3f6a00b812facadbfe4769eb184a090c0942dca599adfacef29417914bf4c5b072ecbedd3c0b64243f4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
134KB

MD5
387ed93f42803b1ec6697e3b57fbcef0

SHA1
2ea8a5bfbf99144bd0ebaebe60ac35406a8b613e

SHA256
982aac952e2c938bd55550d0409ece5f4430d38f370161d8318678fa25316587

SHA512
7c90f69a53e49bad03c4cefd9868b4c4ba145e5738218e8c445ff6ae5347153e3a2f2b918cbe184b0366afd53b984634d2894fea6f31a4603e58ccb6bfa5c625

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

Filesize
24KB

MD5
87c2b09a983584b04a63f3ff44064d64

SHA1
8796d5ef1ad1196309ef582cecef3ab95db27043

SHA256
d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0

SHA512
df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

Filesize
105KB

MD5
40b581475458b8f9542e2606d105e481

SHA1
8559fd9174672b807d096917ced49be69307f62c

SHA256
04bd343916d4527112382c7077c633dbe4d9698bac4f1909c035e78b97e88a5f

SHA512
1d17552c20291ae46622923a8275697c75c677b609db7da5881252a9b113c3b395247ac935484a5ddf27240b51e346b91202aa356d33ab968ea35f3f9946ec12

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

Filesize
69KB

MD5
805d4fdfc3d3e5ddd5391b8f361fa519

SHA1
5425f05d27964bc57cd879e16914bce5053ec743

SHA256
3924dabf7b129ad34cdd665768bff84c6ffa449b942cab5df2e30b0ea9efb659

SHA512
7a64df530a77faf100ba32d9cf82ca5d57f6f11f40a1e6688d695d3b726b807b6f7e34853fb2b7ecb30c137465618f09077031f42b24eb80ee90ab5c3a0bd8ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

Filesize
326KB

MD5
cead970ee8a43b5736877ea29dbf4461

SHA1
40332e38078af07cad2a932ce6f07df24d28ecee

SHA256
21c26bb72ce9c6938818333c1fd423a995a504a412220dd723e7b8222bba695a

SHA512
6b756b91560b898b6dccdcf8bdb9ac8504012029521d0a209bd2558ee1e167a1fcb0ff7950b52d0310165c6394d5c72b93340281b5aae22fcd17df7114f6862e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

Filesize
141KB

MD5
5861037e5c3dee2885eed8c2390c7740

SHA1
ae8ff249982b4c6ae1f4c7b918de4e08cbc81626

SHA256
8702a6a062ac9258b607ca43d7509a44233738944cda4f8b139ae7d2458e82cc

SHA512
0add69e90b01a31572a59c401c282365539120567e351609a7f06979cc53c5b384f13bbc4edc15d6f0fe4d45e5320d31732f1bbad684bbebe747a0fde086bf45

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

Filesize
151KB

MD5
027af0f43affa4ac4d45493ec85a6338

SHA1
74529459160f62807b94ab58cf0072cb8ee8981a

SHA256
6a357f88f86c9dc002694e8391d8b9a9e60dd184340ebf2618dd586ef3443690

SHA512
55e00c535985a7c19c5260cf9f9d20f4a7471ca42d2c31f2242873cb971efcf3033eecbe0965eb066372ae60816e726d6735106446c95bb4fcc86b6857fd18f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

Filesize
157KB

MD5
bd66cba8154c0a83d3524d9992334af8

SHA1
a553d289b7d84b6d260ecf9fbd3a9de4a68420c7

SHA256
fa22a95c51a0f7e3e5a90a7a597a6b489a5f064f3f1e24591383160a1cbf1d52

SHA512
8fb6dcb1e101b6e7cf4620f1a94f59d7f861af9ef9e6a8b3ae6096059b4b3006293eb851dab5665c7f8d9a75cd753bdbdc58708b7f7250f3577e1aff17d723d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

Filesize
18KB

MD5
d577ae7d0dab6e7925d4ab1f84ac98be

SHA1
f4f38e3b163dd4e9a82857dceed243961a9d6f73

SHA256
efa96ddb34b81c30711e2ef0c27bbab44d224aae0e5c6b83f574aa58c9508388

SHA512
1fe5d78d0f53e3b00459d7f26965630bb7953935b6c771ad33356c5fce25a3f0dff199ec7861cc82ba0191d31677ed38e83471d7691a18e9c25da193d5dde1d5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

Filesize
22KB

MD5
f87b768574f85454c99693538fa2f5c4

SHA1
9500d7d91b66b9442962fec62c28599834fb4f31

SHA256
6773387f34137478ec26548c83079f85e37f9eec2c46cf91232e476f7fa20c4c

SHA512
cb9a165bdbc74539be4854f81407c07fa06f7959842cdd5097044709c2c2029a1f9e0456ce471f45a6d9d06955f28731a804a62040a2748381d89149ec5ade38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

Filesize
249KB

MD5
c355a8e81fab67ff79c779ea8453ac30

SHA1
f07006bd1252c4b98c1b84164b29f3e335095da6

SHA256
7f7ac1d8e514b1c6709e6ebac0b564bf47148bbed479149a3991c70e6b4add10

SHA512
1121dbb11abd37197c1f783d46a8d00c139d90cf7608d794354be4a7f37db001195cb00218e5d51f1d1bc36054f7a6a8fe6141d188acde949b5cc77e8ba2ec3d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
160KB

MD5
509dc4b02eb8ee84785158902b34aaf0

SHA1
8f71d6b7aa6ee0171f14d35198f694586dbf3b10

SHA256
93abedc956d4291a401a8a619424fbace07da3e5d10fc4b93c5f455594276ce7

SHA512
c981d96d4f1bb9031df2e0706b77c610572cabe5fcb89afdae42d1542059e6b7fa72588bb1fdb76f4cf27deefc836506aa4c22761c093bb573a61c469c9aa4d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

Filesize
218KB

MD5
fbd67cd63e5ebbaa3d136586cef0b195

SHA1
61e4654cf96fd23c478fe0e20ec87cd841170ca4

SHA256
093d28f08c493c414151298393889a64bb7f737951b513d395114ec08af5204b

SHA512
84a9166b2a3c528b5b510f98f147d3f7c83905c9a286cecd4cc070b91c33a1135909c80f539ae7939d235fe2376f90dad29f97a0fa37df4e15d046799ffff4be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

Filesize
41KB

MD5
d1d82e0cad752a259f13667e6422149d

SHA1
298f1d8f85572581ff29af1d5257b33e949172ed

SHA256
e91981fde574de84404529ce4beaeed5e5e150c358ab11e155f0c6dda44261b5

SHA512
44958b0579e79d16f54c818090a6e2e167d1989a8821cd8b09bb94aae00e91203b44b63e214d44b312ec7b3e76075463a10013f4f8dcc93a5a9fd3ffd7917a73

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

Filesize
42KB

MD5
b3dd4c7359c65e405f7f7fab2417dc3e

SHA1
39aebf4a0de79b535a853a34e859afc3837d2862

SHA256
2de284ea8978d3037b13124a3910d433e44ff7353c0a4649826a58885b02b092

SHA512
7d1e6c215564e74e08cbc2503763de71088bbb9006f626d565b821c49ce5d99265c5dbea6ab8bc49bf044ca3569a9ae7c8357a903fffd86ec04063ab572dbffc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

Filesize
48KB

MD5
0f2b395cc63db1bd8a5d093e558cbdd1

SHA1
833d0657cb836d456c251473ed16dfb7d25e6ebe

SHA256
f3797115dd01a366cce0fbd7e6148b79559767164d2aa584b042d10f1ffd926d

SHA512
e8a4ada76efb453c77a38d25d2bbd3a7f03df27b85e26ba231791d65d286fe654c024b64f9d6869824db5d1cf59e4d4eb662f5a55c326e5e249144ae1a66b798

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

Filesize
44KB

MD5
13c12dd8035a11f88f36de3b9dc964a4

SHA1
25fb02df3f77368d59eac2e7a1c59fabfe9ac9b6

SHA256
f58cce418d2df873187a718cd5a0d609c711405480c1b56f004d304107c87171

SHA512
7944f16894141495458ea9957172ab4ede54eafc76c50280075ce55f9eca941ffe7c876f2ae2536d7492da0cb340aa8094681929b96a428bf9fedfa47c8dad86

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

Filesize
24KB

MD5
a5bb3bb3eda1301f6ac876a49d4b2f62

SHA1
1786309cdc2fb5c1d29cdac00dbdf13711f19f3a

SHA256
316ba0d916f3d3d945b42e589de9a0326836664f9a06e9680bb853c828c2bf35

SHA512
f2ab2d40d2ccd43c5e5bf2150ea79d575e0d4a41381a8fba3beb47a8944adeac0bd19dacdbe237f8dd1c06fc04403f0bda3fca1ec0fc429357dc705c6db1eea4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

Filesize
21KB

MD5
6b528d140a964a09d3ebb5c32cd1e63a

SHA1
45a066db0228ee8d5a9514352dc6c7366c192833

SHA256
f08969d8ae8e49b96283000267f978d09b79218bb9e57037a12a19091d4a3208

SHA512
d3c281c3130735c89ddbf9b52de407da75a3d7ecbf0026e0de5995f40989883178cd59198354976aaa2aa7b47fc5f3f3856a59fe1463d4e2fdb7a27e9f10e76f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

Filesize
20KB

MD5
0f3de113dc536643a187f641efae47f4

SHA1
729e48891d13fb7581697f5fee8175f60519615e

SHA256
9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8

SHA512
8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

Filesize
21KB

MD5
ea48c33e2560afec958fe8c5396344bc

SHA1
2d83e09c5784df5c427e017cd312606df8e5bbe9

SHA256
fe6b76517c4f221c3241886d04702bb1ea480827d335ad37336cea28dd9c4df3

SHA512
3757c49932afd3eda89619a96572cf6d3f940b69d499ab83c6c14782fb320fb6e69681a33e8d9872e476cf697865f1bc358a01627ea455b3d97ecc772cf85d0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

Filesize
65KB

MD5
69df180bb4202300ebb00bd373d91eff

SHA1
70b99ebb575e0b387b02e9e73b31ef26cfd94662

SHA256
56da7eb804d8eb2415a598a2acec8f57045b885f3bb0ae39b28624e4032d4d6b

SHA512
eee24b136348f67bfec68c7c75dd278d2cf63fa4721582345d33f601f0494beed143a7c4e3e90c2f615ddba26bf314f15eada60194be15a1f19716068f2c3dc8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

Filesize
21KB

MD5
fddaf7dbdddb91037038290afe76132c

SHA1
06bbbe349407bcfe3f255476e36dae83bfd37766

SHA256
9198c07c34332636331dff3d85c36739aa080d5feb93975ea356cf4263990936

SHA512
cde416b7ede7a20438ed168a5ab5efc2fe204854474ce847a44ab51a08e7dcef662f9f86184444bff501e8ae1e263d334e5990925f9dca01e83b547227d04037

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

Filesize
24KB

MD5
edcfa09e7a1dab475a9203a940c416fe

SHA1
048fdcbb3200afd7dbda15b94246f6acf00f8873

SHA256
10d021116292f209c4270815c80f74c556ab826faa6b06aa57dfa339ba94f895

SHA512
ef1508851eaecca47b3200bb8874bcb16e398e06931453a3cacf32ab2fa89b3a4dfcac176006a54c43423b6a1bb00f96f2f6f58a5c8b775274693ec52a231399

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

Filesize
59KB

MD5
4bc7fdb1eed64d29f27a427feea007b5

SHA1
62b5f0e1731484517796e3d512c5529d0af2666b

SHA256
05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6

SHA512
9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

Filesize
150KB

MD5
0b1dfab8142eadfeffb0a3efd0067e64

SHA1
219f95edd8b49ec2ba7aa5f8984a273cdaf50e6c

SHA256
8e2ee8d51cfcc41a6a3bfa07361573142d949903c29f75de5b4d68f81a1ae954

SHA512
6d1104fd4cfe086a55a0dd3104c44c4dba9b7f01e2d620804cf62c3753a74c56b5eae4c1dc87c74664e44f58a966ba10600de74fb5557b3c6c438e52cc4decdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

Filesize
23KB

MD5
8da8f594510ea8a49c0cdca09fa89aac

SHA1
ef53c97574f8f31b785d179aaac65f5a2355d405

SHA256
0390a6ee7f795b5cb37da672d8864fa56c09fc2df9787b17b17cdf22e3f05c7b

SHA512
559cd341f9e5c108a82fa98cc08855cef83d35847fd3eaa3d4f0944a44cbe030350632303af714656e2e06ffff91be8565586efd679f06dcd828809d77cb7bd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
be219b0030239c3fc72606edcbca46a5

SHA1
2d9682d02da60d370341b51996949bb9dd1a16b8

SHA256
c24a140757889fb420c29c1821b6e7d25a8561ce2d19b630616b68644a3f3ecb

SHA512
3d043723528eb7f967e28505393b5c359655cc1cff2e78a53e0d541abdb9d7564698bd1767dff0b367f691dd322e755ffb7caf805218d87d741593fecf9b5512

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

Filesize
24KB

MD5
a0903993f9cb30be5ef2197f74c18385

SHA1
6f46a97ac2afe0297dca00e8a2cc21315d559a9a

SHA256
7c0f8287067cb41e81a1ddcaaf957bb664ef0ee01a1a30534f5b58d4b748db31

SHA512
4cbd71dd5b546c6eed57e7701517f082f15818538303d3813bd3a20d5a9c66ad5c305ab4bab6eacb58995ec44eeb31562e33e07eb33d988c6681ab3b95ac267e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
ef3823cd8a5e82bd648ba37d66b36560

SHA1
c34a7ff642f2862f9a9a240d0fec1acec2208751

SHA256
3dde4a8dd80496b4a8698f261f28a4a1e02d40b91c56c9548b4d86c0edf3666c

SHA512
31a94ea0588a351dab19043289366eb64415ac3d6ec3f1e66f98514cc71a628736cd136797ae5f6e709827610a77c5cb96b28513ea9bb629a09fd67ad81da85e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
152KB

MD5
5d32971e8bbc416f024c5a3098b58819

SHA1
97ec94a3a640ebafe1e2178307fd441d831975b2

SHA256
75086ff4e44465d19516cfd7c787d4c3f687daaf0482fc59c404706323c144dd

SHA512
b7561c7e31c08841b6a1c03f139a30f7d953cd1989c0b6996d694cf47b1899a49aa01c1d07dcf1ce65678d612523f651e44ca2fad5afbd54282605e04bab940b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

Filesize
20KB

MD5
81d7e02e177cb143bb8c8b63b0619013

SHA1
218a56c79486a360c706328b9fd90b4bd7b66776

SHA256
7ff2e285e912c4891bde0f8712eba092b87d5b8932e73f7afd3d5c48dd210884

SHA512
c39d5947e6ba4010c106b0f4af96be6869ed2acc1af80f5a4b3e8e00540ff04a21b37ffd5ddc386b4e7893bd05bc11373674a71b2ca339c563be07a504b1cc5f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
004cf744e43495a03db211633795a612

SHA1
063f9c26e39c9ab07714159400452aa6f2b5da1a

SHA256
d74e45ffa7e375883bcc2d4588ac09c35fc4e48ffb2a9941098e9a3b1e8b4773

SHA512
bd88be9b9149c34976f9745aa9ddc95de3c7f758159f009ec656549c9d61dbc7a2f6d4e5d5d9290ec82f68a6eaac30d49d256851703a5266f960a539173c5ba3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
7e5c19a8348e77d8da5b7b1635713987

SHA1
12182492fcf954ac483b67cd0ace0c21dd740da4

SHA256
ce0e06f7becbe9165a4e5f358e00160f28bf1f3e89a9791a3c6079e774f1c897

SHA512
ff28222bc80388a1595d1f13b8dc654878a593b8e254bf9f24a6e05ff6c9417e2133a741b9e880cfc55addbeea82f8c44a5e05f1b04ea7f456c459627fc5af14

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
085768ed70e578f0625a58df93c50704

SHA1
186d8609d91c97877f3daf139a80271e2af641ee

SHA256
e8cf1dca36b536361e77643fe32bc99e14549e292ea16ad5f53a573d51452848

SHA512
13aac6368033d810a42182cf87ea72e4b81b491f10b76c416de29f2b84fa9f1d5b67f982b23fe5cdec3bde12f82d2bb9725319734f0d9dcde9f248ea6ed7d391

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
a008790e5b053ec5824e7253ffe2fc47

SHA1
543103291a22a11b76451f2d6fb5876794eb533b

SHA256
d83127f4922995855f98138f7b56878d07446253d4547827c07d1ebef622f366

SHA512
92319787be9e8475d548a0c290f19128615fc1b05a7c8db84bb1eebb4ffdf21472fde4b5c971b67b121cce0141719ffe21316a2e052eecb42e4507164fb08fe7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
18c06dfeafc44a5bbb95490b4c70270f

SHA1
90b0394e3fa44d5815a1dc17b978018aec30e8b4

SHA256
e11ada039544b2c7177191aec25de37c510149641e98933a6c3a25f30a2e8659

SHA512
9c8d04edac3e00fa5a5be70775ce00314f69790521a07f216753bd5862c612f3041829ba0f8c8c0499ea9631a69f3f50fec49c90d1c9fc32383d76530e54fbaa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL

Filesize
36KB

MD5
d0e95da0647ec7f7e3e1dbbf28fd8abe

SHA1
09064387e7f0c66acf930ea3c01ddb7260a91116

SHA256
2c3c64c0dc2de3e53cc2d4507ff08d76ca678c83575b567804aec61a601a1c66

SHA512
e2b55da43475d33b9851ee98d5d0da7e53f58f309f4bde97ef631e522ac2d786246dbc47fe192bdef8a30cd145df5fcc2f2d4a206ffeeda558f8f865fa96430f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
0e8526984d93c049b44c42fc71ca91ca

SHA1
7fa1664a04ee76fe5de318cbdeff6bb664ff1bb0

SHA256
2aceb930723e9bfe881fbac136f7a27d9fb43dfb04d62c1f1383613e83a6df59

SHA512
f9c2fcd5938206bc7ed94ae5ba5cb7d2916c008f4c0406c2b7862d336a5951c1dff38dcce642fcb7c7e7c70e95cf391366ba17ff68f25436a29b51e47083b576

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
a46e98b95920000a04190e30fa931910

SHA1
729738e64ac180d2a4369ebbc80b1e4aa28bfc3b

SHA256
7191cd6f03e7a16adea757827cdc70f3a23fc5d2c4dc6fb14d4aea362044e2ca

SHA512
a2ea0f41936817d8e084fe586fdabada502a9151a2f2868b1057a4025543667ecec257ffef712961f2e91a7d17e0e32bb96c238f7f46298d899f6f81dfe0ac97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
15da79e89e85ee88d90d6757e9489b7d

SHA1
977683160f3cdd4aa66c7ed5b529e8e8b40b180a

SHA256
96ff30590f60744c14b89ca25ce88e67f2564c699f9fc642925430b5887b6e86

SHA512
1988aa0ba32b9cee93afb9ad6472d1b9b4a713d49137a9ce984a3f5a68f43a4f4910af6a876587cd137911c36254e4a792b946c6abd01faaa9d75eb746d5064d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
fa9339f633694a39cfa0c2133fa61c19

SHA1
52c7544d1cd7d381b19ef672eb3383e485b9cccb

SHA256
932b17307c5035aed4263ff865f7dce0287243cc5a43dd57f0f9a311a876d086

SHA512
da84ed0b2000d78e8b0602830e3e2b310c23b3f59a1a794f814cd6f5ba622d461c1b70e4b465f07b57b529d2d33a893b970231f28795e75c3172b066798f2914

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
5414aa840b39ea890a844b6a79ca0922

SHA1
5d25cbb0c7dcb05c05607b3f1f855a417d8bbb35

SHA256
d2aa42d52c2764826fda76d45fa0518c7312d56cb55e4acef9200432c7d51095

SHA512
7ad0ab8e4fc7185cb917ba56a0be5e5cd142131da682e8cfa6de4d5ce0a977fa85100dca8488dabea363428dc94cc6d615c66ef679dc573d896150762d537c8b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
22bbeba00984a98343d36b5a8800f09a

SHA1
9ca2aa91f3d7b3aa1b3b49f7dcf2deba07e96f72

SHA256
c9b07d33036b4e36740014db12f93677ff6849600d3a0cf18f5ef9ca3aed0f1a

SHA512
c870ee8bec2902fa9fd5e0cc848e6f9cdc60168bedc73d78040b72468d7edc15b5ca12ea086629180b68e9e969be77f3c79c8be4fe834db2ba2560d3eab86442

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
e9b04ab628835e04158f3d66a266b3aa

SHA1
34935c79c64d671659022a53cf3310879d90f575

SHA256
fbe7e50b8bb0c5725486cac710c6857febe64254647fc06d7966385097d80059

SHA512
c2b5a78a06dca9a8dbb705239d526c11b8bc785a31d514f1b15d64c8fa0acfbc498d631544d20d9c7fc49e3f679d1ee336a133bafd2c8eee8b49ec28475bb877

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f35ab3ca01be3db1703dd10bb753edb5

SHA1
4fbdf5dfac6bc3c4f3602e91e8f969d6cb627d93

SHA256
268adb8c068e7c151c0613a7cd19b545e0c635495a052504b5c2d749a8db7dc6

SHA512
64b725381d7c699b8c110c5ab7e3e883e5cf5a57234bf8f41012e40bcfeba6a06d6ffd96a27474ed303a41120b8b93d16cbdcd9c3bda944a408804859e515f47

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
d38f36e6b8782a0f6cc70c589de45148

SHA1
6ff883760858be8aced20b64fed4c2d55d7796a7

SHA256
0f028b53d8e8321e5f43e7a3723c1458517fae9259836dcf20aca4c5e412aabf

SHA512
d68d81ffbef185d9d26c166be4ad4b69c6cbafb39bd7c70624a3b07f3ed5fdbfd586d2c52a2abb57cc42e8a82e5ac07a915b0cbb91089167b7dcd68f7662a203

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
16KB

MD5
ff5dce76de66a924b9056953f7eec6e5

SHA1
5d6c63791e7be8487f9a25d118bf1c2d16fc4179

SHA256
582639c5ce4daf4b9dacdfa20998ef8de505dccf6bccd950b5268acde2f225a5

SHA512
d301cc9c36ea7bf9bcc57363859cf6d6b1b13d9f170b432aa546407f0bb2da174fa7ffdb50b94feaf938629dcbfa27a7601e2fca17acc4bc26f51d70c2b2ca0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
14B

MD5
009b9a2ee7afbf6dd0b9617fc8f8ecba

SHA1
c97ed0652e731fc412e3b7bdfca2994b7cc206a7

SHA256
de607a2c68f52e15a104ead9ecbaa3e6862fdb11eac080e408ba4d69f1f7a915

SHA512
6161dd952ae140a8fb8aa5e33f06bc65fdc15ce3fbfe4c576dc2668c86bce4a1d5c1112caee014e5efa3698547faad3bc80ec253eedb43148e36e1a02ce89910

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
260KB

MD5
1e5b057149e71d43bbdf6d27fbea318d

SHA1
a26a4683cb5c441f4060e000ec7c7f031ccb4538

SHA256
598b91aef904cb56928fb7717f463a5e968bec98e51ed2601b5b32c6bc674563

SHA512
8bef0069a4cb796d5981f0648f60b0aebf842255f028692dca9fc49300ce40756c8bdf5253346622b1861f5477543c7eaf705198e13ea288e84e22d86b73a01e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
134KB

MD5
fad6cae92722d99d8e3cba1a20b25fa5

SHA1
50320ce0d68c69103d87248a66ad7de2f978e345

SHA256
f59d0c384c5a58ac277cd0fe710083ffae58eab8408ca56935081d6a568cf7de

SHA512
503c8a2a8964a43ca54ff14d92f003caa6d13f5772ac3c54f7f93299c5670c2cb1675b1abe89a4f63168f37d0c27c0a77095fbfcf673a436bbaad3f0d5607a0b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
260KB

MD5
74e75f6a2e41f0a31c569cd408a2fc01

SHA1
b2cecd3843e06572bdcd50954ddcf960b06812c9

SHA256
e9037ea59fdd11d873c8b96ca7ea0d7fb062a1bbb6aeacfdc9a2302bbfb1b2f9

SHA512
64b38fd9343a6c316c855294ea8b82b5e7bc3d946ce7491b77cb63d674f3e19cc09f032f8ee9212ca9f314bbc236545dbdc072631c13419b36c679d0909e5431

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
96KB

MD5
099020f7b364f4435779b59d17f1313c

SHA1
bcb85d19f2d2d85d3313ab076ff74898df3897d5

SHA256
f323bf462088b1c5cda67b1968b3a3f83eb8be20104aefc4d8d3db89d213a12a

SHA512
0b8f22195dff012db5488ec7f5612cee13b5e6ac5dcdb6c6719ccdc78f0768d7d63a21b89a833389265e7011db3166fc43efb3ad8f785d0c3a2f49f5e1e30fb2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
98KB

MD5
6276a22207686276f99e3d88d4f7d5b2

SHA1
dcaf63510e2c429ef80c138386e795229b97ed09

SHA256
210fbc04aa858b2aed843d0bffd331841da8882ba28850d54f06af0a359fc051

SHA512
f4947c8e32db1e0f85c0aead4ff1ec22a5bdf03d93cc5522fb56278756c47fa6c3750454f863d564405a0e5d2a8bfa4bc6635bb592188a026c796f73f3aa95b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5874dd.TMP

Filesize
88KB

MD5
231635adf05eafe58cda9426e992c555

SHA1
9b5e963cfe71144cefe19f20703246b84b876db7

SHA256
dcdf07c5d7d7f7c1d8798ec7a94229f241601708fa9e56aff8b7ac6c152bcbe7

SHA512
f67d7e7d300f106d1706660b8773c5f39ce0a3f69cce0abfb999fe0f5820d94398707f12d89247e5d8d00a40f1307a3e8c24f9d71374fffdf2b41e66c0e26aed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
86B

MD5
961e3604f228b0d10541ebf921500c86

SHA1
6e00570d9f78d9cfebe67d4da5efe546543949a7

SHA256
f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

SHA512
535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ea98e583ad99df195d29aa066204ab56

SHA1
f89398664af0179641aa0138b337097b617cb2db

SHA256
a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6

SHA512
e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4f7152bc5a1a715ef481e37d1c791959

SHA1
c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7

SHA256
704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc

SHA512
2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\539e14c1-5d03-40ff-975e-392f862527b4.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
204KB

MD5
41785febb3bce5997812ab812909e7db

SHA1
c2dae6cfbf5e28bb34562db75601fadd1f67eacb

SHA256
696a298fa617f26115168d70442c29f2d854f595497ea2034124a7e27b036483

SHA512
b82cfd843b13487c79dc5c7f07c84a236cf2065d69c9e0a79d36ac1afc78fa04fba30c31903f48d1d2d44f17fb951002e90fb4e92b9eae7677dbb6f023e68919

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d4b47060c18bea8_0

Filesize
400KB

MD5
1a9f9cc60dc4fbde7527e904221ad7e1

SHA1
208e2fb6f9ab836729bd3947c08b5faf482cc755

SHA256
6d76a778c2a870f03837572391e5d0a6036d8b7c08eacd1395527027001c5246

SHA512
6a917bde136c29b86eebec53eba89165c1aad0fde467bc857273204fac97726b8de953e71732e3ff32f67406b028057824003f5e326f1f65211acc52fc124d15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c361b1aa66516b9b_0

Filesize
288B

MD5
8bddf6dcad929aa2c9d850aadaf35c9e

SHA1
f81fd27bd9350116c4f15c477f59df848ca7efdc

SHA256
26e538da957da6dd8f0246389f6da4e2bb7cb0f0868fb52f9367e17b47e211e3

SHA512
2e430b5002e1dedb9e6266a6118112892539e236d05f07913338d7938f2a8e4f2be9bbf76130520434c53bd2e6d11a79793815bc75e2d2705fa84c371b543454

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e6ccdf1bde3223c1_0

Filesize
19KB

MD5
092b5edf9d36bb8eb4d280f1c75ab46b

SHA1
648d522ac3343f163c9a658dee0b5c28b2a40d73

SHA256
ad5334c1ddbf856790f29b61211300ba7c18fafda44989739909dae733ca89d8

SHA512
3d87f6b6f08cf7be2635414abb1d4930178ff517cc8a4025196eef7548e2da2a6bf7a52406ccc4c83cdd15f3b7c2451fd4e141cf1c968f313f0becb0397c850e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
df2ceb6419c5e5e23bb25f04f4c54d22

SHA1
e27e46fb1bbabb03df073bc8854f5680b9a366da

SHA256
652c654b799c6c9d355aec43717f120471405aab6c35ab20620283bc3233128e

SHA512
44a0564e2864b721a30d456f2ba11f7f51cca3ddff0bee23ad4d63aaaf23b8534a16e1df7f072ffdb6c97f1d7e7464ae43631be672db82287a682e812adc0b2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
fce8576562c45c51a9267ea8777cebc2

SHA1
1e166507067411c429cd8ff17ef22bf6ef8c4bb3

SHA256
1e4ec0e28a995ef18a9ffb674819c4a5f842c354a7ec95ea2e327071226ea30d

SHA512
5968bee47b6aa79d95089da7da6eb621a6cfcabd583c5d93cb1e740ed6b15cd355b8690230b126a6228498e6a28f68948d188545a8b5e75c6c77bcea42a67556

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
7f3d4a98a0a0b99ea349582b77f5ed17

SHA1
793f18380664136e2a9f94ebb0bd8cad5e7676da

SHA256
22f6088244766daeaab45ec05a69e2f9e4e512b50ecd2c5eb074996ed0aa4104

SHA512
622b4e41d05bdbd3f686b6850e7b07a0c6a66ff137ed37806a72e51dfd20b7c9c807b04a626c1a6dc7d904fff594b81bf05521b4a051a1a35eb6889f58b961fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6a2046b336cd942b6b29b6ac8bcb5f62

SHA1
0a4ff69d21c3c92628af5833d6ea960830632521

SHA256
e31f541650382bdfd9e75c3eac4134f3397ab4bab6bb40760245be04c19ba8b2

SHA512
462fa0acfce79846d3a5a56f2ff08a21582c80fcecd0bb1c1643a684282becae7d2300ebc47367c209c0ce32e2862be295136d7c02a21ce6a47e56da5dc2fc9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
fa7a8ec23b581e9ca13c0c70e84f149e

SHA1
7154593cdd6a49ea5d3ca88ad4d1c10aef3d942b

SHA256
2776eee6d7c79fca25422aa91eae9bdae6ac04793c0e1fd93e2fffcdbef946b7

SHA512
105da3946c0a403e02f6d9b5ac712c146d943d10b097d3a29b558270fa0987418db6b899841d574152b42470f78e7c377faa4339a57b37beb3d1de32158e11c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
4caa70edba17834a6ac453735f50a2fc

SHA1
7c6316fa3898d71333203be64e989e16cc85bb0e

SHA256
f8871d2e13872dac521fcb0d1d43725ff58ae33fdf1dd43c4c9ea5a26af22fde

SHA512
36ac73635f44ffba3b2936c705775e5f61a44a420a446b1b8d9c6b4295e450d49d190bf38285669c3405d50a1f25dc6748366086abe7b23f34a8390eb4a927fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
d3bbe5ba48cf5325cebcc6856e961bb3

SHA1
a181836f2e2c018ed5ac53fc3c5b3e60f8799a91

SHA256
17b982f1aaf79c48fb4fd749ac9649e73b60df9a079d85cc8dc83bcca379369e

SHA512
18846ecb006b047a5b227625e58ea965793fbca8a0d57df0226b8d33e5680b8ebbf04abd5ea8215522c9d43ded43294d4c46b6a1ab96cf89f1545337064fa83c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
c56362ef909fc4bbd2fc44a0f97fb3f7

SHA1
fccae3c552262363a80e3a3825610ca05c69ba9c

SHA256
2954a08ab51e63f89844a055cd2ea95108b9fc4c9e7993df8736b0a859dac1dd

SHA512
ddbd13ecd72c7870f3930600e2f19dee70a21d9ae701f25dc6a36a2dcc667f62d28355f158c2f3d13b218a09b50b97b507cb8fa2ab380966c01b1e25803d4618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
385ec4c79ea68c633ff767fc2f1396e3

SHA1
436d46cb90317bd9f689e7d5e169e00d19109e17

SHA256
06879fcaccfccdc8992bfcabec1b9442da1b79d368d17aed8a86217dd7601f30

SHA512
141ef7981e4f9c914edffa1d02ad69602fdd4dd9286f0f4ebed67f5a69ecf6b16642d460f559995ee59d8d5f070f9850dafb54367b8ead699d38f17a89b42cb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
e09c60dff118c731bd31eb677bf0cc5d

SHA1
721290e25592f447c7aa50af610408f68568753e

SHA256
abd3236a7bc08b536bf8c9002e6f9fb5f2496153f5db733b60d3be4666f12844

SHA512
d40cddb0187e8452e5fb0135f678e0e964e63e3fafd4772e87fd1d75420ce5749ad056ac22360545bf1c2a5ec9b0f79a378a8e6773455287990f9003cde567d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
385f3ef66fe67d0f76c49d84f034099b

SHA1
1d941abe75939f3d74b429faf0cb9ff1726b25a3

SHA256
cc0d12cac5a3d289b105199413d1530e4112c758cc26597a822c876551465952

SHA512
7139f4148bebd30de6bc7f374118693a0179da7f89c3de05077ac73a97e87f750bf0991a8a71c96b3563065af6cfd0b5a5816ca35d2afa9919dab7c661d540cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
813B

MD5
1d542d17f5f1dacce285e356fe99021a

SHA1
87c0ec6a8194b3a46753ec2c0ef940575f52ffb8

SHA256
ac4b7f5419c9ec6e143edb2684c84dd638ef63503fcb2830d8771ffe40632695

SHA512
ffa780d3607d14a6e7a270e1ca8347d3cbc368604303e286565701c37169d0d65f1b7c20244448d57cd3dcc6ae813367cfd9527fee921d9e87706d09c3971fe2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
813B

MD5
66a4793c9389cff991173e02cf32868f

SHA1
a784be217b8c1d7e8dcd8ee739d896178c798ee8

SHA256
620b077f6a245963d2e3edd455eb70f0d6c7e0828747b3edb228d089b0a7e406

SHA512
d47bb19b0a1e31363e6b0d965a62627e1c670f7bca78c577545c83a2980a2f7ea2d32a787a4cb20b91c994a786e4df97e0963e9f1a3e92e67eec7c1c5ac97e32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
782B

MD5
e29b652fedad37bf4928c3e3f5dc044a

SHA1
669ceebead6509657aea6f546071b17edd5ae33c

SHA256
a12af9befd5d520f26ace27608c09f32f524029cde47eecf0cc868bb89363b8b

SHA512
9854728984a6391007ffaa0baa4c03cf80a0bf26529db0facac391c27a9fe1a7ffb4196358138e981209d5dd02dac2fd6671312f89c0a186614218a4e234eea1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
813B

MD5
fa28e8e24387701efbf5ea5020c87846

SHA1
cf07ef77809f48574cf4840735c02d823a1fa500

SHA256
10af9d782a50b8f32d595e797723f9b3713d514fe19e7a0d8015f1ecf031ae2e

SHA512
8de9fc7a3d2cca4b06111b20d4f8ad2d906343b900e73185a55e0b0ab2dbfd28bf3888acbc86700afcf659d95439fd2f07910b5069ef5123bed962b3673acae7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
813B

MD5
a008d2d150c4198a3ff851dc2399a14b

SHA1
2a1ee64f595fb5e16899b8b8049e082966f55618

SHA256
203c22929a0410b1bdbfc9113b177e4ce0bd00c3067777305134e7cabd434d34

SHA512
e8e8636a57aa657a7c234ad398dad2c6aa70a3ca7a2f7e2ce53cf5e8e12fe44002078771bb1fbc2f8042529c8683b935ea18cb0f471132ad21619fc778cd4c6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
18667647f3e950c27874b046f26bb2ae

SHA1
829e449346234f0597d0c8316da51220ca4fda58

SHA256
6b87db8db3e89b4e8b3667cd9e875985a12b987369ecc37c5bbc19addb8f7c58

SHA512
396694fa028568b3fbb852cd12469c84fa0c0549c271ac78286df1118c0dca95acc5b26609dc2f3609d8a04c38abf443b18fc2028ed4ca982ab7b3c2247712e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e568f470ababac7a439b1a3c03530662

SHA1
29d19c587afa6de735f8be53e42c8fbd45faedf5

SHA256
c7f16409c91a4f1b7af934e21b58e42db8e9bca66d8025df6ce8129695c89fa5

SHA512
8f113059d1581816b01f08ab5d77f7f1ddedcd6bba858e47f8fd4244ce7a4437da2632d68345774539c245672a610d934dc895a43b44e5ad0ce7238ba017f73c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a0268dd3a369b5583dae3ede48050f57

SHA1
ebe9041aa07d4fcff5998f7e2e23d648665d4f0b

SHA256
5e5df7967fc13e899cfcbb4d17f578ba21beddd62989cf98705b14083c004ae9

SHA512
0c5377968572e7d70138a4d1e0b16c4a85adedc94e2384aa976bcbf28ac1169565cc0dc8800faa73cf7bbbe95277de45868bba3ae1f0a39e22f99c15be5d5aab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9a55066e1fc983ab4dd75c66b87d0668

SHA1
0a3a06ad454b9f609309e9db7fefb049721f5bd4

SHA256
fbd7177d4c3297612d79514d220632310c0051f37cd69a65623ad06f6db34f9e

SHA512
13b0713a8f0e1baf9f6ef98a81bbd71f39d5f238353f4a633f6b03ad46cd1cde3ad4d94e297480376a02659dcf7340a3108ab16acaadad347d9e26905c9f1454

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
cb0b347037113553016111974ea66ef3

SHA1
3c3bd930d405caa9a3f7a12a38cb1a49d663a192

SHA256
ba9c990a4150dbabf63085dc70fa46f81291ae875eae1e69004f5984df413918

SHA512
4c9f19c77095ede440d1f8bc34e460470f79566642ef6856e44eec21d4cdcd0603f138023912ff1c3ea5d03a0dbc561adfb1d683280e85f430b9025a1a44192c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
103e53be64d030d66bf4f84847fdbbc3

SHA1
577d989d810e2cb0be75ff1b10d5f16a76bce31e

SHA256
3d343261f5648af6ad300a9fe401b9dad1c6764a4222951cc6b8fa52812619f8

SHA512
7efa3bb9441531868a485effc3cdd85776710a59a4b4df8a8c54890e4c8cc82e34531878bdcb4980fe9f3878ac2867f6e56edb5842e201a8a4abdde0e29f8fb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
453e260a22ab086ab5c0190227f63d6a

SHA1
aac9dc494a5fc44d7fc7c0e9f259f8050d30a51d

SHA256
f00e27caa2e52487719f5d28116cca4a36a0badf944b71c2fbaa521e145e98a0

SHA512
07148a03ad0e58a0d8621364d6129dfada8f711c26d12af9165ae6ed9b7fa2307a39d5369fe0eb0d9c7ad433008c690d8a77ee6b867ee2bb59d9a67c5c01848d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e087866afd0f9fafd857c4acf45e8862

SHA1
4b35a3a1691e28ccb4ec14702c1746f8ba1575e9

SHA256
2a1cfe35905a53a303000fa010e2295fa8a9cb7ac51aee960616ca02e71f07c4

SHA512
54f8dcc46a3ccced2ee1bdfdb195cff5750f362c55538575f2c97921a4c3756ea88f8f88cbc01c15b256068a7e513847f917143d1a37d68498cacac25ae775d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
053ae39c8b0ad8ebeb2597acd1462831

SHA1
901d8e9f817b0164e944d55dbd40c109f8e7da18

SHA256
321e7924fb61a1cfe97af7ed075e393568a2af84bd220587d81bf08e0e31604a

SHA512
84c3e28684aa47452276f3ada3b1aaadd99aaed998946a2755657fa51779502ff02f74aa14a22de8e67bd2a8202f6382e41d7186c2baada1908520a9601d590e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
25276eb38659fef56715ea16c566ff3f

SHA1
2a487eea32de7eb327448f65980de2849439a963

SHA256
8f5a1bd40c0ae2b5d15870f3cb7f866a7ea8337a52b388f3945cee12d9dc1076

SHA512
7e17bbcbf36dd4dd6a5f6aeee11164f9b2222f63e017484c336032e9539f6ae5e03c155797d97cd690c0416238f7d692f0d22ccc83cf91e80260acb223a86c80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e90ac180ae92f3288960ac2858198bde

SHA1
f8f60d568c2b4f02e80b2e860bcda65762c04d68

SHA256
f517047b76f56c856dd10ea34d65000717265c986cb1dfeff0e5db2767db8ec9

SHA512
4c269614a86ec85a53f695e49db2302c9a037911939fff2c505ea05d7fd38dcead266f7e1a216bd1e60c787b2b2871f833bcfea76b16af36f4808cf313b34e41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c39fb22ec4e0dd69ebe8e42841210070

SHA1
843d96bcbe8ccddd6cce8a270ae125e7ee65afad

SHA256
4290017ab4443cf803c5bc3066dee274c82cd49495b4d42fc00b91f174b1df51

SHA512
fabfb47eb4e62fa3bf7b598c85339a831715eb417e45f280474c90ff7ddced3443a82c3754d25b9d9e6ffe01ba5f550b2b526d980f4582912f0e71be9f5270f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d1f65ff122eec68e34137f9a4378b2d8

SHA1
be65591c119a827be0cc4c2b59732b106de91745

SHA256
0f60544787894e8d1d80a5fffbb2a2798f8e8710c02d6edfb9ed381c474b0a9a

SHA512
f45a49cb720900547c923e84cccc7702498a0f9dd449a5058198cd6ab4eda95d3fe44bbdd7298be358adcf01c5b6cc89b3e2db487a65d259ca0db8967f54b32d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2033ad20138ac2b8efddb98c18337ccc

SHA1
e833d9521f450d016daf46c6b5e0ea11a3795e74

SHA256
47e0afe143ae3eefd01211600ed62a3f94ea46286806a538633458f0fe32ef09

SHA512
4b35aa1c3a2fdb322efecc97ac5d683b07d0df67c0b996728f26b31f14c4fdfc5d1bf80dc43250e6feb4b5559553a45774132fb221175a4215fe282151044f54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
643be14765fd95922a83db87eeed53e2

SHA1
2ea6414fa316347f9237593aa090b6e0bb3cd285

SHA256
2ef4eb7af65173b4dc9d41935ef1ba83f770c737509c1559430273c18c232636

SHA512
a39a60718745105914187d0789cc7bc0fc57d4d8fd46fef30f924761bf710df464b0522fe2f6532b5fb88db199d71a9e6bca32a1f42ad53e2570dca98f69d312

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2caed5d508c3fbc1ebc6c89f39a92ad7

SHA1
63d44642f95597804413b6be27c605244ea37b64

SHA256
90e04bf6fb988a46b4799a2557b03ee82a1c4cbdd5e9c4a9f1ee692de2f7259a

SHA512
a2a8d187b66ce7c4c831a62832af22b60ace92e79437900197f7683ee573d3d2bab02a6e8c06ba0a1dbe28bbcd7de8cfa8be91f5ed15c5ae530235c699217e6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
43e8099bdabd5098924932d18874a41d

SHA1
3a00eb2d9ca5bf3c6a6e752054bbab5594727950

SHA256
99b916258ce5224f4980ced5173967219f8195abc11c967418831de56d8cdae7

SHA512
4a65e790495c58d72318977863d6296d3611a2d21a8dbc6c1c90f1b233015eabecaf999ecb0ac9e27161edb0fcdb8d617dc4363896c8a571d3abe49d28dae14b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c97ee598f8a07abd055705f06b7cea02

SHA1
0df7dd393906cc4d4d00a00cb6b02140aa31628b

SHA256
93b260139e52fb98b0c86b7bec5c041ab8384f834f57051ccf9f57b1ec3f6adc

SHA512
ac0c0ff37295c9eff9c5ee64ac979dbb9c228c5f16bb0ec51318dccd59b2a0e6ba07360a1c03d8c906da77fc0951b48f7fa436f36710556940a51c39b1a963b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a382d2d79e4be63dff0ef930aaa2f536

SHA1
c90cb78d34b044f24765466d232cf34e9c4e6b42

SHA256
be51cf433c626756af021d8ae50efe79b2a0ea8dd0d33991edb660546d08ca04

SHA512
df4792477990a914770b213f3b8f769f5dd13dcd5789f19df94a7c7478e9159b48729150c31b9e6bb5a4099521915337dc5415de0e4d064d198f7b704d59c8b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
66f8d4d317a6d6f3c8069770533ce923

SHA1
5a69c0a88c7fb28e44e8a4b148217aa0671d42cd

SHA256
8dd8019d471c876433ec932c2b47eba52a589707b2efecac3bfe9af8b7cff323

SHA512
c90ade145ccd34397d8436060f14b09cb2ff195d3f5d62b56fcb4ededbb185e823d99356945b68c151f5b7b6a6daadc4515e223a62c114c7833ca15154987464

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8b94ae816b4ceb05b66984cbfdada90a

SHA1
0adacdae000eefb2316d8e107823edc3f40c2c9d

SHA256
83d7d34027e4423cd70c1d80b24604f26cab0b0c13ade224ea40f7044f2e299a

SHA512
f0ce4ea19ed86a117aa47ac5e0c5b2765c3adaa03a3b1573cc482b4dca3d9e5a56377305fc92e3bcbaa44ed8b5014b512f59806cf6d3ec40ddbf5dfc80181d6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
519bec61d68ad3f1062c118298c6eede

SHA1
93c8f620fcf44e7f345b982bb1fc5e58b06da024

SHA256
922960873ea871051e3c80aa84fdcb4812a1d187e207c18b0fbe601a65c563ec

SHA512
80fcb929b06fe3fbbed6cf5b7ba53c464a1d247057d2d98b039dbb67dd95f73665c7c6e13d1a568571db757be3996a3131bea60bf1cff9e0b9e80c438641d59f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9a844a101167cdfbcd2d08947dfb8ea4

SHA1
5d97f38ae56dbc57ae9f3de013b2b38803d0a70c

SHA256
6a42a612e99042e72180e7d21269ca3c505995810770e8c7a800cabefe1d873d

SHA512
289c7b83ef747d47a68ba8e45d3fa5efff7e7a96265d34c6166e7be8e540818d0dbf44062047a2e2ac25bad226785560265e2f6738984ab1c1349b1109d07a85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
79e28e63761bf2c34cf7bb5ee40d045d

SHA1
f7413c8d4b1171dfc836abf5273f3b9f2106efdf

SHA256
b596663ca02c04371796b9058f1d9f93ec9747364e0c9c840637caee010ceace

SHA512
1c79e4c7531ad17f72e0bd2d74286d55248003836d39093ff4ee05b89c2703f814f1239f0150e85baaa78741d5920ba6cf746d66fdd90ce37f58b079abee6519

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
d4e6f7d28b1a447e4587e5b1ad4fffc3

SHA1
781e204637c8758bd1dc73abfd716511fbbb047a

SHA256
b4e7f7003cdcbfa9d7d9880a7a66e3468a6625228fc324cff9696691e9a30f6a

SHA512
6782224f9b9bdcabaf20a3ef44ce5ddc47ba5cd934a00665d97b5cdc5c909543aaf5a20709f48436b90ed185d1f54576d732415ae050453349bb527142337e10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
47113ffe9b9f96234713cdcfc9cc031c

SHA1
28dec96a037f4ca71bc1fed549f7305f12983066

SHA256
8e03022d560574ba4bf97d8c9c6115e1405e3d4c9c986d1b13033ac97068bf9e

SHA512
93e43d02cb4977c4368aabdce9b7e3f38624700f0067d9b9f5818bd042cc84f851e63fe736fdc9f815247376d2b34be1216eb0e27beac83d76c973ed216652c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
3c2ebf8777fa836b82e0d3a2381775a4

SHA1
1057be373df911b8eaafd73da4aae02a115f19f8

SHA256
bb71ebb6286035965e5d6d4c4573326b744a31dbb15737b847960b6cbce814a7

SHA512
11431ad8df1ce4f774bfc4f8943ec06f3e3e59597757150de3065dfd5b90cd59b818a91be76633506c9fc90e69250befe4353e665e2fcac5d567b915f092634c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
b4e606513fa2c194e09cb97d02970616

SHA1
664273650a739e093f7bb95dce942aec1cad94f4

SHA256
55a5cceccfd72235572363ed939bb2f820c16be1cde2da41b532a8688a28321a

SHA512
73395f13a0eaa4bbbddc703fc7a9fac410579c1af54702c57d63dd7e706ac505bb7e8e0e125b593d4020035c4903be851cd8b65ec54ebf38e38b8e534c611cb9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c9193e3e2119675886e434fc06f4a633

SHA1
4320bae36f8dd48185cfd9eea5e4ea91bb81ead5

SHA256
f4affde46b8565581d66a961208388187ffa1de912faf5d3f8da591630bc53ae

SHA512
b85dd80b36bcbe5b9ac07ff94141bd72651633cbc85df512bcadbecc86e50ba0ac779e67de7ede0618d1b3a6acf4dcf706fa3e4ac11cee29cd21238f1d69d057

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
95582773346f03e084b27b19db55776b

SHA1
89c86aa59a3e79b0392016d33700e8614b23faf7

SHA256
47f99c89feaa0f960aa1edfb130163e505ec34b45524331dde68b16553b3f93b

SHA512
c531cd0369ded1644bd3ee4b17ef4698a75f48ff9dc5b1cf1ef5f4d77df3594f147e180f54eed4b7ac59e5f325a915cd6e0624d4df98137092e18810532fd44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
fe9f0470a4fad8a6355273832d63742b

SHA1
3c3c0975ec2e0e13788a5f2a58dda5cac9f905cf

SHA256
01181e9b81750fe4bdd62bea39a431f3a908a897539d263523df7b1cbe298f3e

SHA512
71678b82aca3f952d346b65e3de8a15bc55a29990b6b14860bb6ca007be77e0d39f1d664b0fce134b12182144b87042322693f166915957d7d2d844da7e2ed97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
eb45696c413e59b18ef672981f728cb5

SHA1
66990aa1107e034c0935c0c386d04fee1bb4e010

SHA256
fdbbdaf349831261161b9c76c087305d2b7baeeb3ef7bdd39650855d159c2cec

SHA512
9ee45c6ce6ef2fbec539677c3917e6a931d95350d9aeb27b6c6a0518d1a30a5b8766cc4d59179f3dae190e576214997e958ea7387fbeca93c338a6fefa38de01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
ab3202fb0c26894d5629efdd41dff32f

SHA1
d72a18c40830435f35b36b42dfac2e9787c3c6c1

SHA256
b79c1fe0054a1d72275e2958187c539f1b78b1cdc08c662853dbd8f408052d40

SHA512
19733b67dcbe952bd89cc815e54d1cb543e12d962bcd7abe66db946809c93851cbd2e73972aae3b30a1bdb7a54c97dddfb543b1a951b35409b1a35dbf559a003

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
a49d7dce54af69307c1faad55b59fbd4

SHA1
6f9b7ffda931241c79d214523f42b9f2812bd674

SHA256
bba20693eb999212dd18f70cabce423415d5a786631cf993a2ea621aa0a0968a

SHA512
901099903eb64de9adb8ed3b668c9ab9e5700ae8b67734fe0f8e61a8c40389bb10976a70ddc5e52a2c05d04b3362fa6e09b8be20bba2d39fd13d269c72b42af6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
44f111138452d30100f5458f51c75465

SHA1
37848deab337161b0de9b0723f6caaa329510f3d

SHA256
9f33131b96a90888726758ce7c25ed3ec7e20e04905596d8f7fa712fdc4169a4

SHA512
721b68a02ddd6c3621b287f086cef7976e65553e8a80c37e699e37171546d5b160dbdecd4c0276baf65e931170fa1285099459c2ccafcc66c6f9806f83f1dfb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
fdb3188ce16a8340733c8a05966bff4b

SHA1
98fcb221004426bfc15f0d93ccb7390fe3cd7d08

SHA256
ed8e83efc9c3d0bcc3cdf4cb74e86080651cb1e518ccf020e6e96c474ec298b6

SHA512
0f739abd1362a5805813f5b78c7e135ece0b1251e7759764003acfb2704bb22b7032deec1e226fd5425df09434f789420662160878472dbae7bcc3417df70127

Download Submit
C:\Users\Admin\Downloads\MEMZ-virus-main.zip

Filesize
8KB

MD5
a043dc5c624d091f7c2600dd18b300b7

SHA1
4682f79dabfc6da05441e2b6d820382ff02b4c58

SHA256
0acffde0f952b44d500cf2689d6c9ab87e66ac7fa29a51f3c3e36a43ea5e694a

SHA512
ee4f691a6c7b6c047bca49723b65e5980a8f83cbbc129ddfd578b855430b78acf3d0e461238739cd64c8a5c9071fe132c10da3ac28085fc978b6a19ee1ca3313

Download Submit
C:\note.txt

Filesize
218B

MD5
afa6955439b8d516721231029fb9ca1b

SHA1
087a043cc123c0c0df2ffadcf8e71e3ac86bbae9

SHA256
8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270

SHA512
5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

Download Submit