Malware Analysis Report

2024-09-11 09:07

Sample ID 240623-pwdxxsvalm
Target Solara-Executor
SHA256 8e2f032d0ff15f2c9bab0f9f894936066c42f388a5e891ed76e4e7cb9ff2e365
Tags
discordrat lumma umbral execution persistence rat rootkit stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8e2f032d0ff15f2c9bab0f9f894936066c42f388a5e891ed76e4e7cb9ff2e365

Threat Level: Known bad

The file Solara-Executor was found to be: Known bad.

Malicious Activity Summary

discordrat lumma umbral execution persistence rat rootkit stealer

Lumma Stealer

Detect Umbral payload

Umbral

Discord RAT

Drops file in Drivers directory

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

Looks up external IP address via web service

Suspicious use of SetThreadContext

Program crash

Suspicious use of WriteProcessMemory

Detects videocard installed

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Views/modifies file attributes

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Runs ping.exe

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Command and Scripting Interpreter
T1059
PowerShell
T1059.001
Persistence
TA0003
Privilege Escalation
TA0004
Defense Evasion
TA0005
Hide Artifacts
T1564
Hidden Files and Directories
T1564.001
Credential Access
TA0006
Discovery
TA0007
Query Registry
T1012
System Information Discovery
T1082
Remote System Discovery
T1018
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-06-23 12:40

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-23 12:40

Reported

2024-06-23 12:41

Platform

win7-20240419-en

Max time kernel

16s

Max time network

49s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\Solara-Executor

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2580 wrote to memory of 2612 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2612 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2612 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2520 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2488 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2488 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2488 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2580 wrote to memory of 2548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\Solara-Executor

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6e19758,0x7fef6e19768,0x7fef6e19778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1160 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1532 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1648 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2304 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2312 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1152 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1360 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3440 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3564 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3692 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3712 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2640 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=1416,i,4097361303645506153,17802688247010581450,131072 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 robloxscripts-com.webpkgcache.com udp
GB 216.58.212.225:443 robloxscripts-com.webpkgcache.com tcp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.187.206:443 encrypted-tbn2.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
GB 142.250.200.22:443 i.ytimg.com udp

Files

\??\pipe\crashpad_2580_DVMNJLXODAEQFVEM

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp

MD5 18e723571b00fb1694a3bad6c78e4054
SHA1 afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA256 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA512 43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

MD5 aefd77f47fb84fae5ea194496b44c67a
SHA1 dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512 b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 990906522c16e736cb0400c9aa4f2938
SHA1 d2faa2ceba78470229e24d7da4d7f6055ce0e0c2
SHA256 68517cd76e4c0172865cd5cf953d2714ecbb486554e86f607e7ca1cab6d2fc52
SHA512 29d79f9bd0f83dd02fb394f42792d26ebc03a9107abfec43041bd7b9ce2fb85d8fbf8472e439036036d79f96af3a9b651183f2fa99e84f4d060c4cd0af94ad6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ad7e8fb213e3c9a607ba31e103e6b56d
SHA1 10b79f32940d6e7a63408e9132d364a7520baf8d
SHA256 4f5d536d29a97d4c554ccff4e3b49028c5dce30f6026db9e061792768e930e76
SHA512 a53b5726676190fc52ef326315001677a830cd4884658df23e6edc6443885270e1c6498397a4f9c8f99de1d9a7d5532a705418711320a1ad32f00ce5786eb5ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2eadfc0ee449325cf1414557aa3f17b5
SHA1 3428e10e3da93857bd8d57677fa6e65b262da650
SHA256 d32fdbebc9d6dee7440ab5f6bca12beba173ce7187f3364f7b13aa197b251fa3
SHA512 0f6427203e52a964f7adc4e46038f3c9654888007b41daac9fa0e3658fe009f6088c963c86c2cbe739d16f504c2407d9c52d947f73ba7580bab20aebac5eaeb2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 67fca8a59c5d2a879679f449dfe8fb0a
SHA1 ea98ca9df2832dde5769cecad12e1a1439f19c3d
SHA256 cc6f5af09bd8c7d9ddd0bdea7442f4727901ab0f0d01c36957605d1775b2c4b5
SHA512 e7bfc9d7ebee8d83cfbd515ad0131b4591179e5855a7e0277f627be37770c395a290231dff4f01064d195f4fdab84aabc4f19cd3e71e39c1e63e38b1b92bd092

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-23 12:40

Reported

2024-06-23 12:52

Platform

win10v2004-20240611-en

Max time kernel

713s

Max time network

717s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\Solara-Executor

Signatures

Detect Umbral payload

Description Indicator Process Target
N/A N/A N/A N/A

Discord RAT

stealer rootkit rat persistence discordrat

Lumma Stealer

stealer lumma

Umbral

stealer umbral

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\drivers\etc\hosts C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A
N/A api.ipify.org N/A N/A
N/A api.ipify.org N/A N/A
N/A api.ipify.org N/A N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 2268 set thread context of 4176 N/A C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe

Detects videocard installed

Description Indicator Process Target
N/A N/A C:\Windows\System32\Wbem\wmic.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-200405930-3877336739-3533750831-1000\{2F964D25-F095-494B-B671-448863384722} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe N/A
N/A N/A C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Synapse-X-Cracked-main.zip\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2828 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4224 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 4224 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2828 wrote to memory of 2212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Views/modifies file attributes

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\attrib.exe N/A

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\Solara-Executor

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffc9d0646f8,0x7ffc9d064708,0x7ffc9d064718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2024 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2628 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2076 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4796 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4796 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5760 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5552 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x35c 0x404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5320 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5672 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6220 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe

"C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3080 -ip 3080

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3080 -s 2064

C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe

"C:\Users\Admin\Downloads\synapse-x-cracked--main\synapse-x-cracked--main\Synapse X.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3588 -ip 3588

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3588 -s 7688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7088 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7048 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_Synapse-X-Cracked-main.zip\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Synapse-X-Cracked-main.zip\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe"

C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe

"C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe"

C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe

"C:\Users\Admin\Downloads\Synapse-X-Cracked-main\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4756 /prefetch:8

C:\Users\Admin\Downloads\9.7.6\9.7.6\test.dist\test.exe

"C:\Users\Admin\Downloads\9.7.6\9.7.6\test.dist\test.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe

C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe

C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe

C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8116 /prefetch:1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_Cracked-Synapse-X-main.zip\Cracked-Synapse-X-main\Cracked Synapse X

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8

C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe

"C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe"

C:\Windows\System32\Wbem\wmic.exe

"wmic.exe" csproduct get uuid

C:\Windows\SYSTEM32\attrib.exe

"attrib.exe" +h +s "C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionPath 'C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe'

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Set-MpPreference -DisableIntrusionPreventionSystem $true -DisableIOAVProtection $true -DisableRealtimeMonitoring $true -DisableScriptScanning $true -EnableControlledFolderAccess Disabled -EnableNetworkProtection AuditMode -Force -MAPSReporting Disabled -SubmitSamplesConsent NeverSend && powershell Set-MpPreference -SubmitSamplesConsent 2

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Get-ItemPropertyValue -Path HKCU:SOFTWARE\Roblox\RobloxStudioBrowser\roblox.com -Name .ROBLOSECURITY

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Get-ItemPropertyValue -Path HKLN:SOFTWARE\Roblox\RobloxStudioBrowser\roblox.com -Name .ROBLOSECURITY

C:\Windows\System32\Wbem\wmic.exe

"wmic.exe" os get Caption

C:\Windows\System32\Wbem\wmic.exe

"wmic.exe" computersystem get totalphysicalmemory

C:\Windows\System32\Wbem\wmic.exe

"wmic.exe" csproduct get uuid

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Get-ItemPropertyValue -Path 'HKLM:System\CurrentControlSet\Control\Session Manager\Environment' -Name PROCESSOR_IDENTIFIER

C:\Windows\System32\Wbem\wmic.exe

"wmic" path win32_VideoController get name

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c ping localhost && del /F /A h "C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2)\Synapse-X-Cracked-main\SynapseX.exe" && pause

C:\Windows\system32\PING.EXE

ping localhost

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1

C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe

"C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe"

C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe

"C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe"

C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe

"C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe"

C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe

"C:\Users\Admin\Downloads\Synapse-X-cracked-loader-v1.0-main\Synapse-X-cracked-loader-v1.0-main\Synapse Cracked Loader v1.0.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6768 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,10352173469851669148,10010542183664603100,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7728 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
US 8.8.8.8:53 129.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 2.17.251.5:443 aefd.nelreports.net tcp
NL 40.126.32.74:443 login.microsoftonline.com tcp
US 2.17.251.5:443 aefd.nelreports.net udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 5.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 t.ssl.ak.dynamic.tiles.virtualearth.net udp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
GB 2.21.189.21:443 t.ssl.ak.dynamic.tiles.virtualearth.net tcp
US 8.8.8.8:53 21.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 dev.virtualearth.net udp
US 8.8.8.8:53 landmark3dweb.azureedge.net udp
US 13.107.246.64:443 landmark3dweb.azureedge.net tcp
US 13.107.246.64:443 landmark3dweb.azureedge.net tcp
US 8.8.8.8:53 t.ssl.ak.tiles.virtualearth.net udp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 2.17.251.10:443 t.ssl.ak.tiles.virtualearth.net tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 10.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:80 github.com tcp
GB 20.26.156.215:80 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.110.133:443 avatars.githubusercontent.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 pastebin.com udp
US 104.20.4.235:443 pastebin.com tcp
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.135.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 235.4.20.104.in-addr.arpa udp
US 8.8.8.8:53 233.135.159.162.in-addr.arpa udp
US 104.20.4.235:443 pastebin.com tcp
US 162.159.135.233:443 cdn.discordapp.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.134.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 234.134.159.162.in-addr.arpa udp
US 162.159.134.234:443 gateway.discord.gg tcp
US 162.159.134.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 private-user-images.githubusercontent.com udp
NL 23.62.61.129:443 www.bing.com tcp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 wave.gg udp
US 13.248.169.48:80 wave.gg tcp
US 13.248.169.48:80 wave.gg tcp
US 13.248.169.48:443 wave.gg tcp
US 8.8.8.8:53 www.afternic.com udp
NL 23.62.61.137:443 www.afternic.com tcp
US 8.8.8.8:53 48.169.248.13.in-addr.arpa udp
US 8.8.8.8:53 img6.wsimg.com udp
SE 92.123.135.91:443 img6.wsimg.com tcp
SE 92.123.135.91:443 img6.wsimg.com tcp
SE 92.123.135.91:443 img6.wsimg.com tcp
US 8.8.8.8:53 service.force.com udp
US 8.8.8.8:53 ds-aksb-a.akamaihd.net udp
FR 85.222.144.146:443 service.force.com tcp
NL 23.63.101.153:443 ds-aksb-a.akamaihd.net tcp
US 8.8.8.8:53 137.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 91.135.123.92.in-addr.arpa udp
US 8.8.8.8:53 146.144.222.85.in-addr.arpa udp
US 8.8.8.8:53 153.101.63.23.in-addr.arpa udp
US 8.8.8.8:53 gui.secureserver.net udp
ES 23.60.223.73:443 gui.secureserver.net tcp
US 8.8.8.8:53 recaptcha.net udp
GB 142.250.187.227:443 recaptcha.net tcp
GB 142.250.187.227:443 recaptcha.net udp
US 8.8.8.8:53 73.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 events.api.secureserver.net udp
US 8.8.8.8:53 img1.wsimg.com udp
NL 23.62.61.123:443 events.api.secureserver.net tcp
NL 23.62.61.123:443 events.api.secureserver.net tcp
NL 23.62.61.123:443 events.api.secureserver.net tcp
NL 23.62.61.123:443 events.api.secureserver.net tcp
NL 23.62.61.123:443 events.api.secureserver.net tcp
NL 23.62.61.123:443 events.api.secureserver.net tcp
US 8.8.8.8:53 csp.secureserver.net udp
ES 23.60.223.73:443 csp.secureserver.net tcp
ES 23.60.223.73:443 csp.secureserver.net tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 123.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 getwave.gg udp
US 172.67.73.56:80 getwave.gg tcp
US 172.67.73.56:80 getwave.gg tcp
US 172.67.73.56:443 getwave.gg tcp
US 8.8.8.8:53 56.73.67.172.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
TR 94.156.8.173:21 tcp
TR 94.156.8.173:53614 tcp
US 8.8.8.8:53 173.8.156.94.in-addr.arpa udp
TR 94.156.8.173:40000 tcp
US 8.8.8.8:53 salesperosominsid.shop udp
US 104.21.82.197:443 salesperosominsid.shop tcp
US 8.8.8.8:53 publicitycharetew.shop udp
US 172.67.221.74:443 publicitycharetew.shop tcp
US 8.8.8.8:53 197.82.21.104.in-addr.arpa udp
US 8.8.8.8:53 computerexcudesp.shop udp
US 104.21.91.87:443 computerexcudesp.shop tcp
US 8.8.8.8:53 leafcalfconflcitw.shop udp
US 104.21.11.67:443 leafcalfconflcitw.shop tcp
US 8.8.8.8:53 87.91.21.104.in-addr.arpa udp
US 8.8.8.8:53 74.221.67.172.in-addr.arpa udp
US 8.8.8.8:53 injurypiggyoewirog.shop udp
US 172.67.164.156:443 injurypiggyoewirog.shop tcp
US 8.8.8.8:53 bargainnygroandjwk.shop udp
US 104.21.0.91:443 bargainnygroandjwk.shop tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 disappointcredisotw.shop udp
US 172.67.188.235:443 disappointcredisotw.shop tcp
US 8.8.8.8:53 67.11.21.104.in-addr.arpa udp
US 8.8.8.8:53 156.164.67.172.in-addr.arpa udp
US 8.8.8.8:53 91.0.21.104.in-addr.arpa udp
US 8.8.8.8:53 doughtdrillyksow.shop udp
US 172.67.171.235:443 doughtdrillyksow.shop tcp
US 8.8.8.8:53 facilitycoursedw.shop udp
US 172.67.144.241:443 facilitycoursedw.shop tcp
US 8.8.8.8:53 235.188.67.172.in-addr.arpa udp
US 8.8.8.8:53 235.171.67.172.in-addr.arpa udp
US 8.8.8.8:53 241.144.67.172.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 celery.zip udp
US 76.76.21.21:80 celery.zip tcp
US 76.76.21.21:80 celery.zip tcp
US 76.76.21.21:443 celery.zip tcp
US 8.8.8.8:53 apps.identrust.com udp
NL 23.63.101.153:80 apps.identrust.com tcp
US 8.8.8.8:53 21.21.76.76.in-addr.arpa udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.114.74:443 www.mediafire.com tcp
US 104.16.114.74:443 www.mediafire.com tcp
US 8.8.8.8:53 static.mediafire.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
GB 172.217.169.10:443 ajax.googleapis.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 translate.google.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
GB 142.250.187.238:443 translate.google.com tcp
US 8.8.8.8:53 74.114.16.104.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 translate.googleapis.com udp
US 8.8.8.8:53 translate-pa.googleapis.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.155:443 r.bing.com tcp
NL 23.62.61.72:443 r.bing.com tcp
NL 23.62.61.72:443 r.bing.com tcp
NL 23.62.61.155:443 r.bing.com tcp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 deltaexploits.net udp
US 172.67.194.219:443 deltaexploits.net tcp
US 172.67.194.219:443 deltaexploits.net tcp
US 8.8.8.8:53 du0pud0sdlmzf.cloudfront.net udp
DE 108.156.253.73:443 du0pud0sdlmzf.cloudfront.net tcp
US 8.8.8.8:53 ndtheyeiedm.info udp
US 8.8.8.8:53 oldforeyesheh.info udp
US 8.8.8.8:53 ghabovethec.info udp
US 8.8.8.8:53 vetrainingukm.info udp
GB 18.244.140.100:443 ghabovethec.info tcp
US 172.67.150.158:443 oldforeyesheh.info tcp
US 8.8.8.8:53 pogothere.xyz udp
GB 108.156.46.40:443 ndtheyeiedm.info tcp
GB 18.245.162.94:443 vetrainingukm.info tcp
GB 18.245.162.94:443 vetrainingukm.info tcp
US 8.8.8.8:53 www.facebook.com udp
US 172.67.150.158:443 oldforeyesheh.info tcp
US 8.8.8.8:53 accounts.google.com udp
US 104.21.24.208:443 pogothere.xyz tcp
US 104.21.24.208:443 pogothere.xyz tcp
US 104.21.24.208:443 pogothere.xyz tcp
GB 163.70.147.35:443 www.facebook.com tcp
BE 74.125.206.84:443 accounts.google.com tcp
BE 74.125.206.84:443 accounts.google.com tcp
BE 74.125.206.84:443 accounts.google.com udp
US 8.8.8.8:53 219.194.67.172.in-addr.arpa udp
US 8.8.8.8:53 73.253.156.108.in-addr.arpa udp
US 8.8.8.8:53 100.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 158.150.67.172.in-addr.arpa udp
US 8.8.8.8:53 40.46.156.108.in-addr.arpa udp
US 8.8.8.8:53 94.162.245.18.in-addr.arpa udp
US 8.8.8.8:53 208.24.21.104.in-addr.arpa udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 84.206.125.74.in-addr.arpa udp
GB 108.156.46.40:443 ndtheyeiedm.info tcp
US 8.8.8.8:53 dukirliaon.com udp
NL 139.45.197.239:443 dukirliaon.com tcp
US 8.8.8.8:53 my.rtmark.net udp
US 8.8.8.8:53 yonmewon.com udp
NL 139.45.195.8:443 my.rtmark.net tcp
NL 139.45.197.236:443 yonmewon.com tcp
US 8.8.8.8:53 s.click.aliexpress.com udp
US 8.8.8.8:53 239.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 8.195.45.139.in-addr.arpa udp
US 8.8.8.8:53 236.197.45.139.in-addr.arpa udp
BE 104.68.85.7:443 s.click.aliexpress.com tcp
BE 104.68.85.7:443 s.click.aliexpress.com tcp
US 8.8.8.8:53 campaign.aliexpress.com udp
US 8.8.8.8:53 7.85.68.104.in-addr.arpa udp
US 8.8.8.8:53 acs.aliexpress.com udp
US 8.8.8.8:53 ae01.alicdn.com udp
US 8.8.8.8:53 assets.alicdn.com udp
US 8.8.8.8:53 www.aliexpress.com udp
BE 104.68.85.7:443 www.aliexpress.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
US 8.8.8.8:53 acs.aliexpress.ru udp
BE 104.68.85.7:443 www.aliexpress.com tcp
DE 47.246.146.200:443 acs.aliexpress.com tcp
US 8.8.8.8:53 ae.mmstat.com udp
US 8.8.8.8:53 bottom.campaign.aliexpress.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dmtracking2.alibaba.com udp
SG 47.246.110.42:443 ae.mmstat.com tcp
US 8.8.8.8:53 fcmatch.google.com udp
US 8.8.8.8:53 best.aliexpress.com udp
US 8.8.8.8:53 fcmatch.youtube.com udp
US 8.8.8.8:53 fourier.taobao.com udp
US 8.8.8.8:53 gj.mmstat.com udp
US 8.8.8.8:53 hd.mmstat.com udp
US 8.8.8.8:53 49.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 200.146.246.47.in-addr.arpa udp
SG 47.246.110.42:443 ae.mmstat.com tcp
US 8.8.8.8:53 pcookie.aliexpress.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 time-ae.akamaized.net udp
BE 23.14.90.72:443 time-ae.akamaized.net tcp
GB 79.133.176.224:443 bottom.campaign.aliexpress.com tcp
US 8.8.8.8:53 42.110.246.47.in-addr.arpa udp
US 8.8.8.8:53 72.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 224.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 ae04.alicdn.com udp
US 8.8.8.8:53 g.alicdn.com udp
US 163.181.154.225:443 g.alicdn.com tcp
NL 23.62.61.139:443 ae04.alicdn.com tcp
US 8.8.8.8:53 225.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 gstatic.com udp
GB 172.217.16.227:443 gstatic.com tcp
US 8.8.8.8:53 ip-api.com udp
US 208.95.112.1:80 ip-api.com tcp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 1.112.95.208.in-addr.arpa udp
US 208.95.112.1:80 ip-api.com tcp
US 8.8.8.8:53 discord.com udp
US 162.159.136.232:443 discord.com tcp
US 8.8.8.8:53 232.136.159.162.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 api.ipify.org udp
US 104.26.12.205:443 api.ipify.org tcp
US 8.8.8.8:53 205.12.26.104.in-addr.arpa udp
US 104.26.12.205:443 api.ipify.org tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32

\??\pipe\LOCAL\crashpad_2828_KUIHSHDHHGCVVBOZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 94227609d61b45e1454c807f5ef60dd6
SHA1 000a95dbc283d5f0923d54015a88d76208003406
SHA256 62df4f0213a5c0fd465c5014fb4050226cf6741ca7d1786c2fae86c534cb9be4
SHA512 95e89936afb8f2db991ad6f86ac5e76ac52615d58c5c3883c51e7f6815fcf0b6a063594139895d395fb3a1ccae9a85bb0773aad9a52455ecef72f5c0a935bf2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 96a5b20d1aa1d31d55fc85333b2e9b48
SHA1 ebaf2af7986388c886f2622e5c6b2fdb77b81e5f
SHA256 6cdecd2e7c7b61fa7b3ea48c627eda6e3bac0a374353154ab85e49adb635c870
SHA512 bf49ff7e4bc68e2d160480faa14d447891283e1ba17967cb8ba6805764dbd547ebfafbc710c6a0e601712fbed942afa15550c40114845e413add2e9585aed1d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4491d885b21f1f8884ba9b1f5598dcf6
SHA1 2d4153f6dec973dd5b88ae780c8bb46f2cbfd913
SHA256 8279073ff48df548e2be5d31a7b8be85cd87786fd866e2b016ef7f7ad5891f48
SHA512 366de07fa7f445ee4dd63992b9e67d5090b91671ec191bde1087652ae4d1e27796b930c535597cecfa5f8d2091af06d6f6d9f466773ad1c36d4b4f9e3a55ed8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d41d1310195f103c92128f2e9709e51d
SHA1 36df6172fcbe1fda956cfa2e64f3677de5842f17
SHA256 2c14ab3e9596e0eeb867f5c6f5b6980016471540e360b064a09f378ac15c04c8
SHA512 182eca6eb73cb9eb58ee84ccf69a706d401e823f43f07becdda48b320dbb0d0bc89c9adce1080144a44746a9caaa97ef2dec1c4d7a0d3aecd8511e0a5a76df16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6c309094cd6d555c1402aa3c476974b7
SHA1 e19e422da3e13350ef32e2615a09d9c9fe0702fd
SHA256 e22d8c698eb19e8e045b52b137b4ecae676a859b610054abf7702982faa645ce
SHA512 b77dad302ba6dbf744fc5c84191640223a1239a909e3254de685dbdb214a277eaa40c2905b24aa27a532277b95647e18c39f51dc5a45d525bf29b6b5f7959d8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ea18b545e5ac0cd62042ace8813127b8
SHA1 2d96638b7019054c8f205cc8cbc8cf2e7ff458fc
SHA256 6d80db375ad0ca56b96c0f21da8428a19be0dfc812cf3198babee2a5f0f89b39
SHA512 09d3190752b41df5060779bc4a1cb761ce48a45c00afe9d15a2794e8617a67cdfcb8f4175828a6212ba3b11a35d7d52271bc2b3e0c9e6f1c71313dd52e163cd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58e896.TMP

MD5 b38512a590d8af4256efd200b6ca846e
SHA1 07c1907d355934b5240a22f9e2570ac36f6c4256
SHA256 2be9a41ad30c3e2f41f2ed4dc406426322484deb6c1a70d415669463199bbefc
SHA512 dc076ad33410c24e7c75d2f7366f265cc19d6fb6e0df9084ceb04360e5b67498526f01cddb8fb5d255a21d582d87faeed3c6ee43cf24aa71e9e07ce602f05a59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4e134750725ab44109cfdbf59bc3ddc7
SHA1 6b277c5160cd1b8eb14fef58946f41e42074ff98
SHA256 68b59285cc4a2e77d09b64349c95dbc8c68e0b329a826a894c611b2a79a0ad08
SHA512 32498452580fd37bd8a07d15a8f9fe54dcc4c5ceb59613d3a6b93447f7afb4eaf2f4f654eeb858bf46da9ea7ac0db2f7956c3c7bf4bf5fa21cdfc7c078ae7d56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6817ecf7846aba2cfc0471d3ccf795b9
SHA1 ac86e42ae68df96aca0b055966d74d70ea2e6cb9
SHA256 28c32dc49248e1661d727b9c5ecff1a64a76f862b0eb05dbeacc8c024ba01c61
SHA512 00a80f14402b49dee725edd69db7f5a2ae7228dc6ffd91d0744a6dd2794490d0656ad155399ec150a0fe0af3f3630427c9b874537e65ed6aa5ad7eca48ff85b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 52b3110a15752b9b918f9960836b9c2e
SHA1 0da9f1690af5a1e68f0b268ccc4030d819eed14a
SHA256 9e1b2184f082a7b8d68486f36bff9753c09388e4852c31dbbd25114c8e471c60
SHA512 bb67ea50821d2bbdf6983e24fbb591fe53a7c1d23ed7e2eb847097c7f625d2bbaab918281b56632a77e18dae52cbbb99b29c9d528e0d1587abab78f841a8145f

C:\Users\Admin\Downloads\Unconfirmed 311026.crdownload

MD5 5950b84376aa4635d6fe4acb824ed1b4
SHA1 a81f288a8773c24788b61bf79af77d266584442b
SHA256 edb982889235a7849fb9e56312f209a02c0dd01a76b6fa508e59648c56755147
SHA512 9d83f6485ffe72bb606636788653120f32d1b8e99e69216a8a6696c2f20659440bad4f76fbe23210445cf60e3970f16ba49af77bedf32fb3757e9bda712cb4d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b969cba720a73292a13cb6dbf9e4f42a
SHA1 c21461be184762aa2921d31602a79297c7fa463f
SHA256 d24e87160addb1b0edddb1f9ffb13b65f9c13a596276534cf91f63aebf4b6a95
SHA512 1632467172e3ddd2898b591e5cca7d5b9a3a8b9942c272197064718e469e79ad0fee3d161365788e603ebc085d2123a722a2482ef5e0581ad911a87a64bdf176

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 efc30e25225c4e046ac0c4ff37903b36
SHA1 91d3125b3e18b719b4b7b1326d4d419f9298c663
SHA256 28cc86ced8caffe1c6f6d8bc10658cf1a8284b1aaa0662e445284885f4495951
SHA512 5bc0f37bb048ea84c3d609bcf89001f327115b46060aacfc2f1d774381f47df085761701ca0d412b072514ff0a9104ba0ae002e58550b9f2e356ba06475260a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 64da8c229a7cd02f4f8fb988a3b13887
SHA1 b0983d58444efcfb51b33dc20182762db9e55389
SHA256 5b08d6eab721d40c5b0a41d2cc3c19e9ce9602665b69853fe87001b9b90e75b2
SHA512 3bdc4b971430ed9b3322222041e98d34cf74f55ae9b5fe040ca04b79e8c25a5ea2368930dbbcd8c92e5a197fec0443e1757d2671e9125ac810387df40f443e64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e692e347e26e2b82a2df3455d3852752
SHA1 8db323ec9f388a2f822a3e9a9c3993ca9abb7588
SHA256 886de1a0ee9557374dd355653df8e123845e5edbe91e24ca5d2e3afe03a8058f
SHA512 1225e564cfeb490dc82ae7693fa63f642dd85ae84894e827db9a45a718f5576b5cfbd233c3a6bd14d5639bee7942dcfcf0ab89973068abd45db278c6342f613f

memory/3080-675-0x0000000000310000-0x0000000000372000-memory.dmp

memory/3080-676-0x0000000004CC0000-0x0000000004D3A000-memory.dmp

memory/3080-677-0x00000000047A0000-0x00000000047A6000-memory.dmp

memory/3080-678-0x000000000C020000-0x000000000C058000-memory.dmp

memory/3080-679-0x000000000BFE0000-0x000000000BFEE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 47b6e3b9a667b9dbc766575634849645
SHA1 54c7e7189111bf33c933817d0a97cefe61fe9a6d
SHA256 302ed4f6c8ac4312d71205603c4c28dd2976fafe4c05533c0a08ab3bdb531aa3
SHA512 a12b74ff45f6f9e6abf459863c299e1fafe61dcf2bea8a7331ed9547de14ed29e2deba69b104c6960db93b458f83ba6a4ba454c5514105e7ffb96da96e26e612

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 0e045ce9afca2d76d92e1d18344834be
SHA1 f1ebee178f8b20945fde60e392c53c7deeb5d3f9
SHA256 c5c5edb2479ae74b76265ce50f3288286418225c04a6f35148d3d2238a4fad8c
SHA512 d82c38a003956344659b0b095d6639e081e5a87a7ac822efd2366a39109862bd90661bd448e097deb23a26efa042703fa378f5d7c6701fda9651f2525b942821

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5 90c7c3cd9f1bda2460a4ce30711d11b7
SHA1 5d62c16f1237f8429a215873602579743cb25aa3
SHA256 f25d0e3f8652167d6a56adb7c8e0441e364dcbc2bb847ad176dc3709d3272450
SHA512 55ee7a7956ddcf57e0e47d83a317ae663a26c5c32d549d2bd3ec4a54f30720ad353ab67b522310f86e1822c628ec5ed654a199d329752d5b8a4eb0c07f78399a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 0f3de113dc536643a187f641efae47f4
SHA1 729e48891d13fb7581697f5fee8175f60519615e
SHA256 9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8
SHA512 8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 84edb9d5f777b40a1ac0a0f0187d9491
SHA1 910a34a976ba912ec1c55005d15cd68ae151b08e
SHA256 9642e72c52b446bd615b8a960d88ac7d3bcfb4289b3d239ad98622980f357a57
SHA512 5dee26b5a6a90d7c0f27c6d73441ff19d2e8c0390e85d82f5c9a63a315c97437836cc8f00b1cf03d1cabdef4999f373fe19cd5333282779b188c856776d831f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

MD5 082ea42c1aae3b695989f4b6f6eb0dc7
SHA1 1918fc9585b161ce79c29ff6d2fec39e526a3aa2
SHA256 d87bcc1cb0e666b8812da126e6e308529997c88176123920942b43efade7bc77
SHA512 e6c7b496139c95c43e9af3fbd3b6b4a90a206506a3f823c7003fc42585a404e0323ef85ed6233ac208c066ec528857a8609c36ec6c749cec0702149de2c6f69b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

MD5 15deb2f227868e22e62aad743443fdd3
SHA1 db87dcd259fad33146bd95dfb7edd39e64e14159
SHA256 13ba113a7d1dbf634b226d5d27c91a86bd8edd5cde9607e95cb173fd38e1b88b
SHA512 fea6d0d7e67435be1a06c7a4af844ee7e1fa6aff96f1fab21a1d1c3ae1cbbed28dbef42af3ce63beebe8342e8acc1eba55e5814cd171651dce53634a5ef07123

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 4bc7fdb1eed64d29f27a427feea007b5
SHA1 62b5f0e1731484517796e3d512c5529d0af2666b
SHA256 05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6
SHA512 9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 b61b5eac4fb168036c99caf0190ec8d3
SHA1 8440a8168362eb742ea3f700bb2b79f7b0b17719
SHA256 3c495df6db16ed46f0f8a9aff100fa9b26e1434016c41b319f0c1009b7ab2e1f
SHA512 cbccd3aa5a1bdfddba5cc38956b5523a422a1151cdd0680336ab94f07aabecd1695062a0953c32c8209949ea6a4859c625c6deffe5108e8d5e48290017e51874

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 1ec8fb7f6fd9050ab7c803cab2b0b48f
SHA1 6b831a02f8daed957b82c310cf867aa3e77b9816
SHA256 4345ede1557a49c9322e84fcfe2a20821e47003c2b3c214de6ba6d5d42bac73f
SHA512 d4ef769640f071121d07f8942533c7cfbaf4e4a29476d8977fb31d462e986246278fd599b2cb4344713f5ade2b89faed5c728093e31848c9e428601f0ea2f871

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8db01409c530ba00_0

MD5 31c7291e756a14d094dfb204651221d1
SHA1 3b1a4497308caa380f7fbed50289c6f1dd459b1b
SHA256 06dd54715a6f0dbe32eacbdc494564d2ca130a45020bb9b7876ae02bfca209fd
SHA512 7b899b009fe76b3549f71f945ab931bb5dc608055e1c4dfae1f9b4f65594cd9dbb971092de8ef351c9b1113e3522fa176d9ecadbb61a8da8bc30bee82fd16bfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 e2e9087eca5b4988e289dcb6c3373722
SHA1 5e0800225db517d5428855102502216df1c8193e
SHA256 feb51cf7fd6e7c2033481adde36be8fdecfb9aea6eedee5f5f4abc81ba802817
SHA512 b7f45bf92d471d778ff6d0e0aeb52b1fa2fc5d34e3aa239e16b8b971fd26650512567e12be190f15e73db36f9609ba8101500441db2484b55b1d2d93af7f4932

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

MD5 62b3656502d2f8f50d792ea1c8c41438
SHA1 cb0fd4f8bdfb6e32e86b6d805916dc95bbed7a71
SHA256 4ff8b2f6c2012d486d9388885d7bed23513913f3e50d35bfc34cfc0e6d4c6385
SHA512 a3fb33fe6c2ff563c8324dfeea173ac02d918b38b14adf56403a8fcba33dd21957bd617b4e15d09e1a347a9fe7415789d710505317754873aea6a8b60167eff1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 1ac27973084a93966f6a90d5b518e258
SHA1 787986ea7a061e18e3d858c919a7692c6d100ed3
SHA256 f8a4c49273653af8dff6bc5e910bdc5a4ca5496c60f0221cfbf3da26df2388f8
SHA512 3bbd2a13f7583890c4730aa4fbe49bd1d280950e28917389177b6eddfdfaee6b1969efa3e4741c6ab21e9f83154540ed80652f3c1c9145fd2fa6a0687b6aa461

C:\Users\Admin\Downloads\Synapse-X-Cracked-main.zip

MD5 2adb248e7929c293a0b3af27dea0d512
SHA1 0bd64b466b8b1889cc07f64628b9f0fc43572409
SHA256 c4465a48e8662e9e1d4e26389fbfde2edb58cdad2dabe711b8e744732703ea6c
SHA512 ef66e4b08f8161bc0928e67df667f0e5e4e38ca1a69b222fcfab21d3dbd5611277518b0142f4d0715a29f9282b9e56c6de2f5c6cd8c8b3d54369999515391bb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 25b6243fab3c9e83a75e09ae2d65d8b8
SHA1 b01dafa314d9c7c68bf37dd1a6b8f0dc3d4793bc
SHA256 b0416d2739da3f2fb6dbccb1ac808fa3f7b5896aabbd5be9b852ac0be0b57118
SHA512 2875fd9055dd641f5e9efca379ea6c0f84885f52ffc7f039adb64ab16392c5008bb7f6564049990c0b6de8ff94a41b8a5a5a68e73b897da81a09e0010ca8ab1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 537d232b4d5a94b7af9bf19fd9ef6c48
SHA1 d1ef5fb38f56352838016fddb6b89261bc03c1e5
SHA256 38b2cec87870e6da5e2bf9cf80586251afb573d474b4901ceedbf1192cf197ef
SHA512 5fbc055f2b35f282962de0620d005775f41e7269d5f3bfa42bb8616c4405e833e89e514272b8122d5da2e62a2280f3abdf9453b944008c4559154eabc13facfb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 90416aa16fa0145018b90d5edca59576
SHA1 959f22b1d90f4841a050a5535561f9a962da677b
SHA256 a7638c004d1684dd8ad4b36fae22a2d6b06aea8e5c6a2cb4c8beb213b2cf875b
SHA512 7a0da9af082ac922f4d611adbd46243266c827b398b9a2b0c45f90336cfb51c73bd7c632f124ec96114415891a7d7f2e2d7354d68f5fd539e5e28bb05fe27599

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 416faca230ddc230bd5175543da63bb9
SHA1 7fd173cac489bfdd81424f2758bda21dddb1f6bf
SHA256 4983c2cc0127e3d6779795d0748e266eb35e65b99389403f29a78f1915c65f62
SHA512 1da92da430b2aa64d6d8cb171e6a99b5a1e7ad7c54689ea5c35bae23cb049fd7cd7e78345664617fbb95639074c0fa0d76e01697013a7432c40f03c53e71d95e

memory/1776-1088-0x0000014987550000-0x0000014987568000-memory.dmp

memory/1776-1089-0x00000149A1E50000-0x00000149A2012000-memory.dmp

memory/1776-1090-0x00000149A2740000-0x00000149A2C68000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 7741ee52b8ff27ce465bd2ace99f6336
SHA1 39784ee8709dfe55dc1b54844d3a8ad431260cfd
SHA256 ededae09c4a21ff3e9b9a836c4eecaad242b096e7efc61dd74c61afa73173440
SHA512 f69fa0ea10e4840b559be2989a21b9b8f65460b788339dd49c2afd23287f36f0a8db532ed463cf0c2e38937bc9f028d940c4e4ff03d165a894d416c34079a3a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d6717f92ebcb635bee395c6c2127c9df
SHA1 14574733375e0aeb6ba8f97f3efadb22e08b9f37
SHA256 77862c9d7419d469eec6ff080eb7312af8c2cf72bbc7cf4f6872d5b67415edb0
SHA512 17ead8f097ec00a43174c1eddc360eb18fe6ef81e593f21d25bc4c2306b96606a93ef4fe7e1b9dcd0891c798dd68004e52a56aeed1cd88f343a31717e9b45107

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 35e46b9820066e6ea91a968be76d0580
SHA1 b8a08c02b70def383929b7708ec541f2d840b951
SHA256 fc8f8119f5daabe115ae053eb97fa6f07a879a0395124c63e52f00451669e525
SHA512 35f61c26f6f29ea98b9d646e219740bd32d0caeb65742343b0fc44ed34ff71591dd91dd1c1c21cc9a1f693a36d38ef15fb1bfe803179562a06bdedcfcd383691

C:\Users\Admin\Downloads\Synapse-X-Cracked--main (1).zip

MD5 cbd31a8ff67001f6ea1d752418f4d742
SHA1 99e93adfb9129cdd69f8c81dc4e56c23f2c98e9a
SHA256 e7d4c29b385b32640c808b57d28a4b02ec0748e67769c6c79880ea9491474247
SHA512 88719d779ad67494e6c963fad1a3e948d939a6195d849e99191c913d7e74756293a18f807404b7328f5730037752904ae466b2096b1075713c4fd501d434a04b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 967054559d20deebe6b1fbb04c6d40a8
SHA1 dd18146474f3126b875f04dabd0374ea0f1e231d
SHA256 22418cd8458803a4b6d6cb7b636d4f008076ecab5e3c696f4416ccd5824c0d1c
SHA512 5e6fba6aa9579788b094aa692a62d27806e74df47c8e1c1b262e2410890ac25ec0713874416229a03071766ae9f007fd72f2a13d7755128b9f8cca44b5d4354f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e3d7a2d12d1a91bc0c13c3cbfad0576f
SHA1 9fc8809258a5197242bea44f0e0fff52bf295407
SHA256 402aec1face4dbed0580300fa8e7fa8b34754622afa2997ad1dd9edf71bcbe09
SHA512 320d817d52a82b01f9e2f4cec5171370df91b3d225b22ca96cbe865adff7a09c36cdbfeaece917d25f36ce68a8323adacb4582834db3b1f9dc109f1ce52da0fe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 e15f548486fd0a7acf7f122b81c403ff
SHA1 6cc77897b12d6dea2f14db284f032ba5d04f63ba
SHA256 075439c4051f8e34adf68f511f968468108014fd99d7ba9175bccc7d0124c3dd
SHA512 612d3442862efb0adee1956ef527379bc9babbc5b0247a774c6b36cbbbf95a5464b4cacfafea7ef545fbb72f302c6f51caba8cac62125fef59f6a47a520d6a7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96d1b5d1-0148-4dc9-aec5-c25ac8dcbe36.tmp

MD5 d5baa218ca6bf88d9f57981add0afb37
SHA1 cfc79dc6670b8f24ada5bf493882ad0ec4a5a33a
SHA256 586247869508acd4f8180bace0d321a9aa44e9b01e705749786f9563a6c7ced4
SHA512 f16370e040157b0f8cad7673a9e7069e08c5da7fd48e3342bb15f419650dc2ca2102241e5000efc92e61ba569f657ba3e3a25e1709b3dd45a8ce8dac004c5160

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e6a9a506ae1d4a2e699ae4dde615e31e
SHA1 3d622f4035d233a29510d9a6da4872dcf63c6303
SHA256 ce1bfc7032cf9fcefefec0fb04a543e8fa41581f6843c6244908619d4869ca4e
SHA512 8fcee20b6828f6f7051ced65df5490355439fdb53e581d89ed1c0c106d03703c3fb1bdbf50951ee47179b4fb0766742c8b5c021117d16193eb6b54789dcfb5c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5 081c4aa5292d279891a28a6520fdc047
SHA1 c3dbb6c15f3555487c7b327f4f62235ddb568b84
SHA256 12cc87773068d1cd7105463287447561740be1cf4caefd563d0664da1f5f995f
SHA512 9a78ec4c2709c9f1b7e12fd9105552b1b5a2b033507de0c876d9a55d31678e6b81cec20e01cf0a9e536b013cdb862816601a79ce0a2bb92cb860d267501c0b69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 96f2afda5188d9816903018cf4fb7be3
SHA1 f5eb468f53f766e4d09abf2921753d19e49d8129
SHA256 4e6834eec43ec5757e096d881eb6a584fd1d8f99a598c30b806efcff755c0d54
SHA512 c5865f8871fc7bffa47a7aa022c452c4d18755f5e34594cfcf85c8920ffc16fa486026a7565198244201f905e384f66d84304ddc63f8665182897256ff35dd59

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 956298bdc3a8a132fe11e5a534f2f7d2
SHA1 7aa4ed1a8ad13fbcb8e92b48a588dd624546fbb1
SHA256 7469a7b4045554f3239f5483a1a26ec6ebfb42ec8eae1dbd2570507c7375051c
SHA512 5a1f35ca4e8f1fc6482b670e9c7eb56485e147f6c1f454ef3e95e91176f7702f5fb0309d6b09b498bd8ea40b0970a2d8193aa9432a2fa15f3e0a758d340f3f01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 51a339135bd85a852d7790b319600899
SHA1 2eb4f7443970dbc4589cc4ab32d553bc98773b9a
SHA256 04f55614fd9fdd184d036883c2c346702df94084ffb441a404f5cb6bbd437cba
SHA512 4d49b58ee45f2e8360de0309d605f64025d3f2ec7dce09b3451a67b60157b0ff99bd2841e3c5682f18a2b79ebaae78c9cd99d4fc72c31a947c89799d24045dc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6378399001b14a8692ffeb0868954a6d
SHA1 63d36c21d59a4759cdf934f1bd477c01d57995c7
SHA256 3f92b54900734fb9f438fe9f3da34cffa61e12f45c579a22284c512e771f08b5
SHA512 41561e669b7f49c06fdb2b5f6567a521f58a4e5e6f3d6ef431aa68dcba8449ba036d6522db8f823f484524c8aec26841d3c7ae48fa121d31b408a9c99c837b91

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 96d8b930125e636f3bc61f2ac99d3db6
SHA1 5a3477b65ffe4057413901eaca4077790ad2fe58
SHA256 994f7f7a0e982a0a4abfe56cb2e458b29fdc16e167caf61cf38972e10348a962
SHA512 7a6bdef25228ac71170f8ad12f4422eb3f752843746d3974ef9e8dc0b206593f6f384a6819a717a0fd087c09f6edbfa08dc69f2e350b542c443199fab4ef145c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8ba972594c0e9285cf07dd75aa4a0462
SHA1 8395ea3c539f5e9ab70f70a032da651ee7f92b97
SHA256 d3474c026b09dd9c7adb1b0d2fc81acf2fafa24242afc38c7b0933049d8dce64
SHA512 45ad765adaf2ae10316520ca3a95e96a9b22dafc5b64f867c09253e255191998710fb251ed8afeab4dc5b34a5a82c69b6a6886158986548026fca4382c466ee5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9a6d1da4d001b555d77e27e6e694b87d
SHA1 d22e76ee6a703bb75ca4a689487d12ab1d95f765
SHA256 46fcd58a4c758ed14ed9c9467e4756e3f48b4ee60b8adbe8ca25d73e677162c4
SHA512 a30e1486198b83c6fdf654b161bf96ba216680c14a8f150cabf29f7ae7d52b13b9c09017f078fc54ba42cef0e95a9b799d9d38151a6c0ac77e2750515083349d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 fbbd19768fb22841592e7c2367ad5185
SHA1 6c318ab905b2ca4a528703bf6adb39a927c07860
SHA256 d2d1c409a129356ef4e0aba37d9140b5db2aca1f559ba51f3fabd12424150293
SHA512 d4599a62bb2da6f0b56cf2fd6505d11c3b4604d0eb472b8dc1a9bfd547e6469d5f217a1e21c995578a7157c3706de2b523666d1c4fdc82f589f3fba92ef49bd7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14837c834779ae257ca92d10990702ea
SHA1 96442cfd94195a5cde2458eecedcc697ce2da3e2
SHA256 85bb8a30ddd70aa454c183d08772c8d96c111cb377c4467510e10945c921141e
SHA512 124ddabef91c11506a16db02104bafb92c9af7ab565887a0bd8fff1ae535477d18073d39cb934ad3a7e3ca0bbc2bc2c374eae75d4396278d7bafa64d0d235a6f

C:\Users\Admin\Downloads\Unconfirmed 442315.crdownload

MD5 84ff8159a2b0d4ec520b3ace24f76fe9
SHA1 59893e5c319fa69af29f26744f5598946fc32442
SHA256 5835594a7d29cc3b25e373ab04ffe6137efccf1f10f89730d18353f43e2c60c7
SHA512 bf274953f7f2f2740a9d108f9885526884ea583ef9e1d9efca24d47c1496efabd7d6883fb7280e5e236b3fbda47b3f6a00772742e8c9265b9ff6c8dc30a8d2dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5668317b72a62ca9629273780289dbde
SHA1 31e184f094126cd60afd4f391cb16df310973f71
SHA256 0cb5da693bf009a55840f0c087510ab5c6bb4feeebaf53bf15dbe8ccd8d007bb
SHA512 7b4936521e828e1fc84cb875377c9a0cc4d67650fbeae2a913b383ff5d58850a80ba28341eac8fdfa1a1738c76dc43677f7c80000f1ce3919c9cdadc6d23e63d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 707657d828a681051cda15af63554a02
SHA1 14b58e39e37cfa7f1f856b6f509eb3106706316a
SHA256 10ea8bb611490ee8a5826393c2585fa878a49ac78f1780af39b76268c40ab73a
SHA512 8f57f12f881f1ade4a16cb7fcc5bc74bd615551877fed60bbf023e1b3576a36c228a2ae91dcac815a6d59ff7d2f04aa0c15eda67ee4ebd003e39ccd2aef83eef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 87ba906fa75ffdfe2d00bf8329e065cb
SHA1 58a72ffe999056b6bda59fcab73153159e14326b
SHA256 cb3c139fbe3958fa16de87e7ea17ac1f9a7b918f9f354058f53a00930a12ca06
SHA512 f65e6eb7e903a615759e780e00614d10c4696e7499ac44eed3c34245d793c3fccde4073df98e661959b4574d33c1bf33195ac6d5752ec6f1bd237915240a0fe9

C:\Users\Admin\AppData\Local\Temp\tmpcxdgrwuq\update.exe

MD5 b9d3bc401918562eb2ac05bb439fd329
SHA1 6a1132889c6497e21c9216c9c2994e90802f06ae
SHA256 05f32face74a8d89ceb315ef87674e198ed2a2d4771aeb303285929b6e0c4162
SHA512 0c56fbc77e7abdefdfcc3b3c2c6d307b043e15a53e2d1aa8f9bc5965ceb69dbe5b61551c783cc498ad32b1d016976a40edf7b2e4addfac156a8f4be3c6241dc4

memory/4460-1598-0x00007FFCA3470000-0x00007FFCA349A000-memory.dmp

memory/4460-1597-0x00007FF68FE10000-0x00007FF691CBF000-memory.dmp

memory/4460-1605-0x00007FFCA3470000-0x00007FFCA349A000-memory.dmp

memory/4460-1604-0x00007FF68FE10000-0x00007FF691CBF000-memory.dmp

memory/2268-1606-0x00007FF76A3C0000-0x00007FF76AA2C000-memory.dmp

memory/4176-1610-0x0000000000A90000-0x0000000000AE4000-memory.dmp

memory/2268-1611-0x00007FF76A3C0000-0x00007FF76AA2C000-memory.dmp

memory/4176-1612-0x0000000000A90000-0x0000000000AE4000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d88d28db12f9efc061c4a5fadab9fb1f
SHA1 aaa5ca78694628ad99dfd870b5403b2de2b072cb
SHA256 67995f03cb2889342d09b8c57575a73b3b500fe66d27efc35ec96ecbc3f6e215
SHA512 8504d3510524f34ae904c76a3848e6028ea69cf8dd75055874e8269c10af6bf9f3de5b3754547eeb8fedb6985d72d91579cca15aa04cb9d7605eb4fbc899d9b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 21bd965fbf95d83c41dc8debd981db5a
SHA1 eddcc4a45d569520fbe89de77c65ae57764797d2
SHA256 205dcf4d339454cbe1a2f5422b314a5182238f4159ee0255abfd8442c499c857
SHA512 659b1bc9fc8c16f34ebd997b221dc5e4c96c2ccc04d4d2b2f4c9b23475b7d8e958ec9cf628ef358d6ed1cc987edf5ef1800de15d85e5032220c747808a3c6e50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d2ab760cb0ce146c62d3af1d2e3f778
SHA1 1bf8d401a56dff6567cf15ee10130bb3fcae4919
SHA256 faa99a27c1e3ae9fd096aaa06170d677c13b3690b4d881ec38bd539ad13348c0
SHA512 bf3e40a4083cd37884685de9b0a731eeb5739aa43926c93f11b936b1d6a4b4a5bc0784e648b2c919fa9119659d4a026f986eca43b735dc2aab79522c0a00cdaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 968efca386f62550b36dbb3c4ef85a22
SHA1 4ce6bc0a8d57dd792aa865ec49029d04b3c9a7a2
SHA256 700cc16789a0e75cb1001f79f81f8a61970546d45e125630e61e012e3ff1bf59
SHA512 025047cf015700daeae9ccef54c58843449b817d760b2d8fad310263c725bc2d4beb4ffa48d088b84a9e41ffa8c32b1e625140a94f72c8f7607fde4a09aaef5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e7d673ae027647d507b3e2cfb88b6362
SHA1 3a464617691ca291fe6c082cb979ad93e2604dd8
SHA256 c2e0eae6a7c3934f899ded948d9a7f25e43bf664ee225ae78aaa6ddda33a22d0
SHA512 0e2884b1ada65389381460c72ff78db5d1d3fc4196d1fdc3a6f0c9021fed40546db977b71ae3292a507b03a69eb31e8bee726dd2eb60e90c856186ce800b8af2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 dec9e26a6dbf30b32e965ed536c62ab8
SHA1 9e2861420f86098e9e98cc277f2fb248b52b36fc
SHA256 a54fea00aca0c6753966a000490f5e6dffcfa91463f377090f41123b321c93f4
SHA512 ae6bf8a45985259f09d12ec67b8b536f2f1af1eb6f6236eab1fcd580553ca7f620d8823cfb3ed889f7e7dec31a29b6b1db735c348b4bcaa80119593a78844bb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 15a1d26c6d8be712947aa0560f6d3ffb
SHA1 e51a53d23686107b1ae665e6d52b2673a0296588
SHA256 3533b9306a1ebb04ab6236993ed4a78862f231ee3e096eacbb6529d17d3e44d7
SHA512 78f6ce87bebb5eb84a1bedcf986a23cf54dd4a39b2237cbdb089aef52a0fca4363c68785dc0ac264394104348c66689c01e0930e6d5817b5dcc204f58a8de32c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 12cd36954aa6fdbbd4828cc874ed0cf3
SHA1 69d2da3c9998d93e0d5f7df9a07541a22c7a50e7
SHA256 cd82d4e296713dca8fcf66eb449b0f85ff4d2b44c161ec36694e309057225164
SHA512 760141d6a9151362dfe614c6bcfd3c57e87f40197ecee051b6bf88239df108b7e22089dd2be6dae9262cef76a197a661ba84462375981c35994e7a17feb13b81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 76c36bd1ed44a95060d82ad323bf12e0
SHA1 3d85f59ab9796a32a3f313960b1668af2d9530de
SHA256 5d0e5d5fdb4d16cf9341f981b6e4a030f35d4766ad945c27381f8d3afb624542
SHA512 9f0555fb531734b786364701e17cb7f57ce94a688d4616fb85bf32cad45a253a9c479a301e05a4f8630cfea141dd52726a31b8e90198c19c16f33fb150a04a40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2923c306256864061a11e426841fc44a
SHA1 d9bb657845d502acd69a15a66f9e667ce9b68351
SHA256 5bc3f12e012e1a39ac69afba923768b758089461ccea0b8391f682d91c0ed2fa
SHA512 f2614f699ac296ee1f81e32955c97d2c13177714dbd424e7f5f7de0d8869dd799d13c64929386ac9c942325456d26c4876a09341d17d7c9af4f80695d259cfea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 5d0e354e98734f75eee79829eb7b9039
SHA1 86ffc126d8b7473568a4bb04d49021959a892b3a
SHA256 1cf8ae1c13406a2b4fc81dae6e30f6ea6a8a72566222d2ffe9e85b7e3676b97e
SHA512 4475f576a2cdaac1ebdec9e0a94f3098e2bc84b9a2a1da004c67e73597dd61acfbb88c94d0d39a655732c77565b7cc06880c78a97307cb3aac5abf16dd14ec79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 f99f2d6a05b0c0ead4b862985c5c1816
SHA1 b8ba39585bcc49c925f4d7e9f2eb1e0be2bc870a
SHA256 adb2077ab140042786d0e8d599dc7480fde2d2452f8c5e28ffdecd1a044faeb1
SHA512 b6360cfa3ad0f9982348eed1e7a5d3e941e7de17e899f3c70c33cb1330e44a7ab8e1111aa7dd3f06f69f33e518157f65e17c6b1cec363082cdc8855770de3e47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 635efe262aec3acfb8be08b7baf97a3d
SHA1 232b8fe0965aea5c65605b78c3ba286cefb2f43f
SHA256 8a4492d1d9ca694d384d89fa61cf1df2b04583c64762783313029ae405cbfa06
SHA512 d4b21b43b67697f1c391147691d8229d429082c389411167386f5c94e3a798f26c2457adf6d06caec446106e0f0aa16d895bfc4e8a1ff9e9c21a51173a923e3d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 77e89b1c954303a8aa65ae10e18c1b51
SHA1 e2b15a0d930dcc11f0b38c95b1e68d1ca8334d73
SHA256 069a7cc0309c5d6fc99259d5d5a8e41926996bbae11dc8631a7303a0c2d8c953
SHA512 5780d3532af970f3942eecf731a43f04b0d2bdb9c0f1a262dbd1c3980bcc82fe6d2126236ad33c48ea5434d376de2214d84a9a2ccec46a0671886fe0aa5e5597

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 0ce62e9d53ff7bbb7f9f3ec62519209b
SHA1 d50a698c63fb1957a07d805bd6e826b262773bf0
SHA256 d7d211c8ccfc31dd47ef275249fe7e4bd5fcda67a0c8d35781a8b2cd3d798521
SHA512 bcf0b9f827b6f1d9124cc16bd231d7bba6aa40929549dca3d32247134f8c27fcb5d184ca21eecd9a2a52c0a68333088d706fa37f215eb412adad0deac20ece0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0e4ac5c3345372419607f656e4200da9
SHA1 a9dc6cc874d21754840777eb996dccbcf19d4409
SHA256 118f18cc84770936fccff1760e4e14e6e467e7a3c03e05cb80dbaf34c28c06e7
SHA512 393b8d38c84458a65396ca88fe530b68f573161707c570e283457e577c639be635f0a5a1b88d73a490d7df0f96e2bc595c3068574a556660dfa96c6805bfcd47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 900752541dda51575dc621ba8bcb3762
SHA1 cb8e4bcaec0132ac5579e58f932ed19be23a56fd
SHA256 b886a6b48d66dfec8823ae534b09c5380f206b753bffbfb61e699f6ae6466d08
SHA512 149d34d5e9cb4b5f950cc0fa63faee37b905aeb2a3fa59ef56bd70d73b7d3297ae962f444bbd8b86f8620a3edeb7760858cfb164ec2a8fe02255dfbf533a8c48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c6b32ed1e33ca9e56f86d6593655e03a
SHA1 dc77d4381c690bee91f3ab710aa0c296558edb77
SHA256 adcabca1399106c43356d92a6d3dec52da913aa0663dc4526097a624611b95f5
SHA512 7b0b6b2688593a57ad994636a57c6aaa0398250c251039897688a3bfd52c917a60dc53929eaf012c486c65085e042debe1168e7a702b290a6b8fc40626a44f16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cf6ef59ffb6541726beff68149040137
SHA1 9308dcd21da09a37432de2b9a2d283a85bcc8f8a
SHA256 edfe7fc1e760358e2e3cb4ccedeeabeaaec08af83d9f95c4741fe9b1c41f200d
SHA512 e7724d8b0565e57f283f65810d0d358245c8f688ca76dc855fb5014bfdaa59404af311952dac7fc0c968104364b8935e71834acef1145f08a28854e2714456dc

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 6a31e35e29e67896c2c751ba576dd42b
SHA1 31e58375aa21c499ca1dc42680560d5171cd3362
SHA256 dcfc8dd2cf998c808482ab69ff77ba5d79a4120abae26b12c983cf8fe87ea799
SHA512 8e37b4c1b71504373010a42734d3a5de128ddcf376ff535270079c76e20be1294e3bb95de431d1e48dcfb117ab019ccda72fd91bd59f05d74ef87f32c1e544b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f877d31293ef198fad2d31fe20c19012
SHA1 1f26924cb80d1154591529e07d12756bd5cf62c4
SHA256 8d617a051bebb73cdf55431238459666a8f91fdb45f6e469c9aadf077f363df2
SHA512 da0366130554ffc0556145f8fe3a4b15f36f06563f1fbaf8952e31b8c513077a6eb8ea0e6ab548cac1a9dfc579cb8dce4edf17ed22f2dec3f790951048ba3da3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9e304f72b34048f1be576a22ebf2e596
SHA1 e0359017765d8c8399dbbd4c3d67d0e59eeaa3ba
SHA256 a4d66872d7880412640b47f62a49cd6d6e046d09c6211240eafe4c8a22a60e04
SHA512 7c6fe855f49db6f66bf01329bd18c98a9c5ad7c89b45428b70cc278e0d181f776384aecf0e916bd317e2b837f922481bb5aa444a0173d0a1a8bed54da2d6dde0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c34ef712f36e1e1c_0

MD5 4423f490f3771fdb8d7f77e4d35c10aa
SHA1 e25685dda83211b06a278484cdd3f2a54004a3ba
SHA256 98577af072cde14a602aa4e0f54eeaf267524040a31617663dcc01dc1d8af559
SHA512 172bcbc1d910ea7a3e19a1b6b30e5de3e1dbe0be902a66b2c05b22c04df003a2ca794653ba945753aee68ac206b3b4c5a7239dc9eb500504ed1ccfac5ae89a47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70e3e8edea57383e_0

MD5 19683d6bf38318ba5278b204cc45f026
SHA1 c701c0cc65715dd0bf0d01acb317b0eb5a574847
SHA256 2c70fadc8abb9b8c332be33590228645a3578bc2aea20b9b23d9791697ddd762
SHA512 d7be24da59696740781ab2c92a6dc340bb8d456e4d20e10232d0ce6d4b2078f20566e033981c27f94c8ae3a7fdcebceddaba30bbe4dd96c83d0196a9fdf0a276

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e0d8075aa6aa8c3_0

MD5 960ac5e25859dda486a705f509bb385e
SHA1 eb1d49d4773011f991484074587a15deaaeb37f0
SHA256 133bab0e47698d9a2c4b69638d7280c5957083627f2a17d6182f0dc5ee353550
SHA512 d85ce4ba4a78a5f24fdb0e0c298dd60c719b4e59f7c19991aa716587fa400fbeb8b2075e9bf7d632bde00d5074099207d8555d117a0e23762723af303be7c0d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f1960bb53f2caea7_0

MD5 4dd094b480debf1ff1fa6254ecbec47d
SHA1 956a05f3a4fa7643238a734be68673d8f96c477f
SHA256 6f99b6c022fd1d8b02901e297135824a540be9597686b028d300d1fe75e72f1d
SHA512 b08fe25fe3936b22ffaca32a1c8718b77f0bf78a7377ce3892a6332416a86fb0d03c50229c31dc6923b3b2b44be6dff4616e7867a7266022596146cd70f2296c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc2959e97be7ccfd_0

MD5 21fe13307a866a01067ea8f83d83ed1b
SHA1 0df181246657066ec2492aee5610378f1e68c666
SHA256 1fa769d40c975fca6e0e85485aebb3d2caa0c09e28db0409154a38db42269fca
SHA512 f50fbc7544b07a9697a27ec6461e78df21042b7373d516a8b7625e3ac8e713a888726234b76a72b0864cda5400504ba0869ba2c513be4eea4567170755d875ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40767c6ffa0c49cf_0

MD5 4b08bb6b4653484906f6566b903cc296
SHA1 4f1c6df55166e7caf81c3044bdcb0eeac550f4c9
SHA256 7d4708b8986f9abfb68fbd697051d5ce8762479b2391ff18ad60e452ae96d97c
SHA512 d898470e3c9807a1ff4dea952c27c0bfb06c8e56c90b03be55843f962767403ccb2a766cb397889c50db78ab94f7473ca2b1d1b2ad3a55519c0efa0ce3262d0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8cee3d41e64301_0

MD5 2e52b8475d609d2ad29e1f53467e424f
SHA1 6fc09ca5b62bf25cc3ce30a1bd80c85d039a279d
SHA256 c153064d7d96e4c1604f4f6057837517785f159f938d974001d021682e11e38e
SHA512 b8b68a326610fd7b65cb9034fd9833eba4b1c73a0855e283e40dcc22c082daa5a57f6f654cfb7f7d90d02054864e1fd16fbd0df946002b682d2a4f2e060e05e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9cfd34e4f6b93b6e_0

MD5 7a495ee588984b765e02eef7a9754fcf
SHA1 bdcefb8623b46d344810f28984c3616a3318de6d
SHA256 bba32933b6c8b66fd8d0c30c3050284c903d46417b389601397a6192fe4cd00c
SHA512 2353a91e965ebd33285fa311eb8b0c1039d6afad153a16d19e97edacae58a05149a1f342b8597f226f8750dbbe5aed8b970a8307a59e5047228bb3127466dbb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\26dbab8f05a12756_0

MD5 a3f45b5b91a3dec06d39ac88501f07fb
SHA1 d374e1d1edca60aba1f0539681f61c166fdda130
SHA256 ae7469629e5296fe71454689d88031e00ef7740e533cef29d47fc306e014d9fe
SHA512 3673ab653a0d24a46bfbadb9d0476e00e878d393f3cfd834b64178c94cab5c913ba5e6047f6eb40e8bdefa7fb574ae166ccef9f9fc2793470340859fa9520b27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d953ca0d907d8d4e_0

MD5 73d3a22ac9fd329cd93645a06fa10552
SHA1 2c5097628feebdc83315007e8f7db82e756dae50
SHA256 31d0b93683c7da82e9c90fc25cfba6fbfaf8b5025c2dd75903ade5c0ff50d289
SHA512 7399c424fd65fec99ff1c2f65e6b092521dc1a60116f6c5fe32977b03d7352a884202fa4e0ce19fa17e60181f0f5d62888e2270069e5783e16f9e45467d1ad6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42674d907b7f25f0_0

MD5 362dc78421fa4e553fdfb332b6f8a910
SHA1 2e7f0e5373e1bc8a3d5187823760a0c23e821386
SHA256 5120ddbef5287dbefaf0202219161e278b7560e6eace8f9d1dcd58d633ce0326
SHA512 b27c6064d632743c140a7afd42a581069d449a6ab053b25fa6c25315285d34c9cfe84da41c5a259207ef9f081169dec3df8fe7afa9983c5de1281763055f262c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54638d80a240654f_0

MD5 80703e3d938bbda92f597eb7fa1ccc99
SHA1 4994fee9b41db20bc1d702449b14a89ea883b299
SHA256 864babfecc72608dfc03955c9c2e7422c70e6f6c2b252f0bc9667de9b3accfcd
SHA512 0d7ff3784f38c843f94bdb9c943c24a17a8d8f3c5335fd4c141ab4defa73257bc861dac0c58f6ef66437b1e7e6a1a49ba9664d27591b726a9707db8807669f11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\380839b8f40e2005_0

MD5 2726817299da5be033dae951d504c1be
SHA1 dc00c66e1bd2e2103dbcbe26abae3b3a163a1e8f
SHA256 2db274856f5c1a9042dc2ca955ff101ccb7547aa69b5dc442e18d4728a3731f0
SHA512 10bbdb3352752f00e8b8705567c5f62b4bc3469ff9acee58d4273f92317f38764634fb45524b98496694cd50c3284ff251bbae85f3bba7c906bed4a04a5e947c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56e6fb20f6f59341_0

MD5 c017bb43510c7e5cdc61309daf7c576d
SHA1 e1e5270ee596d6b9f0255cc0efd5de9d664135b8
SHA256 dcdac09a25620dda886a1a11e72566e8ab7f2e6fc3f913124536001ec03cfc30
SHA512 42db1c6726aee04b58742be05f638dc4096299992c38172df757d60c9cbe9a09e0ee86394a9a88679f9402d52413be037521ff4649d6df15b572929a0da7fe57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37609d620b8038ac_0

MD5 25762304c68a8fbaefb5f975ce3c4e19
SHA1 345ea1358e85217fa480040faef2906050870475
SHA256 0d29f9c73e3b0f51af71728ebb69d7dc064eda8f10397a888a5f88c47c079a87
SHA512 d9f450d635cb113bdf631be593682615a17a3cd184d614de9a6dd0815bda2112ee5af51b9375b468b3c36578a0ae0a0ebc8b50f6725e385d73cf7bd6e38f0fd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f5f8a510fda97114_0

MD5 62a92a31de20a77deaba24bc374ebe1e
SHA1 f800b84474ddbbdf192c58ce4578e745280d900c
SHA256 a2cad69b042d436b5606fceb29380536bb5163caa7052bebc34de261b1055a5a
SHA512 e17a0d1f5b47c096f51bb758665ce5ba8ff94bd738180b5ecf39d2c09597e521b535eb4eb2830a80b8ae9499f12d37ca3356267e2da1e70d78a46d7b27f7d861

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a806f27d066581ec_0

MD5 819e2f965c1620e95f9a43ddc251b359
SHA1 97101a34937ba464f01debccfe89241a302e1050
SHA256 07f26dba132b7da512afa65ffbd2ec1e9fcc27459deef6fa446efcce5ab3e2e6
SHA512 3f1751d9226c8c998fb815a8c9cb717122d6db0df7ebb7039078cd08daf64102afbdbe3aa2c32fa0e16bb3c1ddf3fd3d75ec8332b0164800a2eb5f492c4c09d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65f6d931acea0eff_0

MD5 c4fda36b9ae7806972613c9a94cb0ab4
SHA1 2cabdf6f6f32edda0bcae8ea6bf400f48c987460
SHA256 a5db97ba7c2852c68aa47bec55679daa5dbdf933ee800cc07865fb083667b534
SHA512 ac4eb654b1118eef71ba83f7c65b098214098fba6de8e2ff0ff5c116955cb2572d3ab45e6517b58c6eb79e468c0502e46fe65cbe2147dae4a9e66e6560995508

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f63b2dcf918f4446_0

MD5 1962ab0a224351ea4232926939a39f19
SHA1 bee215346a5df5afae7b8454497815db51b734a0
SHA256 5839b830185329e468b523711b9df310dd7b8ef3b9709310bc4725ff3e734227
SHA512 ee58dbfa41441929269b099813991a5b7af318d00cb684d73c14191e296203665100066b77821f9ac4440f2145d67587354f86f2d96baaf61940c814aee1f3e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45d946099acc6255_0

MD5 5e4d2bc5ad3c3a5def256da82c9cfcd8
SHA1 2c17b2c268e7ac54b8e68bce9a2aeedf08de421a
SHA256 d0c15c1b97f8870b9059c2d482aef5f31097f7dc42b3ab5ff1fb08c4301f9d17
SHA512 e938e11a90c74b68d92cc77ce358e1657136d1525b723123b43532593fba4d775595c12055f2394d7667fa565d063d849f86bbc82847423e1e34d77a8019dd4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3407e3dcd0870f4a_0

MD5 410992d171272dcab255476b30429709
SHA1 110e21730ecc0eb33c1a4d0cef04fdac2619f4bf
SHA256 b2e30c0793f1f248655cf03e19249efc96593a2112c218cb5a04d881b7b302d1
SHA512 599ae7412ec39f775f3488b226eda3af4aa0d9a34138b656ca00cc36245e9ebcf9a14515b8d1a7e09efd85c75d208cee0442fc7799eadfb84fb2faeb32117e4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b152b3f51c1ab150_0

MD5 f6eaf9785a56c8fd999483f0de3168c3
SHA1 78caa652198c8276200788cd28fc575d08358a69
SHA256 992581b9516b9dbea0f1ffe545a0b6f5477c42bbee18178bc6a3e6cd63a1d0c4
SHA512 7e5b757c6ca8f5d639dcc808e75c3252f9ed5db02cd1667349b53175804665803379964b78ad4269e76d0f99c2007a4ed7115d1cb14dc707943c32d7a33a4ae4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fe7b359c88c9fdf9_0

MD5 39bb6f9862575fe349a51691a362ce6a
SHA1 63a56361fbc8ff65839effa1c0af602e490f91d6
SHA256 a718a32e2507dc41e185e2d719f91ca4d32846ff839f527696c575601e015534
SHA512 299e0257a94e9a9b9086c8eb00ce62ddda6ae6de242f3cc9186df9b225738a516b20fb9b158c96ac0cacd419e85c8d223fecdc82d60404b8ac93765f4d914cd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54196d5272057691_0

MD5 09354c7feaae70987de1946367136e96
SHA1 5128000711b6ae05d7314a5f92cd0bfbe0c1aa10
SHA256 b603817158f7f0db9ea4118b93f48769994fbec0827bfaf3d53046b5acf17341
SHA512 995d373b115055320e84d2330e0796b919fc7460876f909d612abe651ef9365845c9f1e1e9e285c174a79c277cf70a1193e0e4985e1769ba5339c27cb4cdae9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\66bcc6f042af58b8_0

MD5 b3f56f70c37803285f3ebf1121fec37c
SHA1 e1b5d519209d8d28fef1c4c263ef9233c1443c9f
SHA256 3958370cf2a248e73ab9bae02a88adcc0e2a42ad79399c47d6756f827727e903
SHA512 ab2ab0c0b79e066497927dd0786c63e0e02cc2446b95b11f86212703ecf5a7100dd2001b2fbf3c8de35852c57ed9a1bc38e70cd03dc1e4a8623c62d0e32b4666

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d04ac37af9c07223_0

MD5 fbc6a90f7c4b08c2d9a6e61c72afcb3e
SHA1 2a07f6278afe9816e04f4cc933042a091999bd8c
SHA256 b5fc5ee739c6461848675caa71afffebf83eb669769cbd77ecb39d39159adbe0
SHA512 a376875095b52bdf0b9c2a92dbd7d0f7515061e5b5efa000df819960ff6a4729d553fe37da67c6f22d7a385bc21f4bdc13711f3d75dc2bf8be6c2cb82ff7e6df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9993efcafe93d531_0

MD5 f4d1bacda2936253331ae58dafb217b9
SHA1 bfa7a56e21f400bba3f795a91f5c76b87018494f
SHA256 744606efd2bfadc0bc10ba0038d1984b29fd22f3973e02bffe2d26d1c654203b
SHA512 8332f6ced2146e1297954e7e96e8668325b5289a31835c767d5681769b71e4855c0c551aded3d3e4e3be047d33e22b3b84b8790d628334774ec07e9fc4647d28

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63d4ec708cf4dfdf_0

MD5 a29e295b88ee57a856f5cb9111908be3
SHA1 416146281b82aaa9cab4df8e7fdbcc6554d7f495
SHA256 1f35d739f35b895cd8bc7c810ea98dcfd61d7f8ad3ac4dc355afcb5f7d7343b5
SHA512 285c38ad1e2377e50c17bf3871af590368e66735b002216f153c90355d783e76b41e8682619dba431da82a5bb80ed07ba4617cbee48d47a5c587001511b2acc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f80e7eb836e1a7c0_0

MD5 c7a9e6ef5d3ede873c7f5dbbc926a601
SHA1 4fdba58b0224d10f335d70a39002fee9f2662b80
SHA256 cdff8b8ee6b4bca9331cb0a646c801524dae4e79873fc363b3df43aae5024698
SHA512 11ea12f5113579cfd23c8e5299023dd724856e3d63db44a78d13520141f4328dc93dae284f19d3708cf726e8635a25f359a5d231861e84bab395b221dca6ab61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0cac38a50a5fa198_0

MD5 136575744b0a6f42ec0df3c4fbd27a21
SHA1 796a2c0be8f6bc93c5c776c60152f22b0fb23f28
SHA256 643ebd2b34ccee2a19ff94a128453ce56939e40a065f3208f88f0c7a010f73e2
SHA512 7e7bcc5f347a3aae2e4eea58ca36ea3cb829212936860ea8e2f8c244eff4ed8e1bda19e50afc78759f2f57c5c24247c1f9d30c3e041912c859c3969acaa6d455

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8811a848f33cffe0_0

MD5 4732c579d585351f24b2697500241db3
SHA1 c19b776c3f4216338e2f871aa638941357bfb0a8
SHA256 7ac92423be9a860135082bf12068c085af03437d966bf77a58b165e582137562
SHA512 7f3e9418f18f4ad7563db345f05f9fa996a4d4a34167f76ceab53052e6599d612995c8e6f3b259979c2c953edfe8504955888640d88e417d0e680f5bbd63ae2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b559bba6453726aa_0

MD5 b737510d395fa5d95a2c56af6c9231ad
SHA1 ce64aed2e6d6387df7d87794dbb18cb4d4c10599
SHA256 47e81b980e69102b66b04d6356cf696ea6445a5a35423a80a4ca27945b05060e
SHA512 2656ce21a5ea688967c6b795cc8d28d7c45f10074aa0a3ce0b4acdec3ffdf6baf77f53850ea9a2cb22e8b5ef5fbbcfcf32a5828c984d28e28af918ceccaabaf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45728aa101fde4b5_0

MD5 0e68b71700edd8d361e27190b8715a30
SHA1 d3230ae1f058d3ae1131ba7850bf387d5995b662
SHA256 08009cc3274e09c06a7cc01fda9a8412b1d075fd41714eb791682a102bf1443d
SHA512 7863b6ac7da6ad0f6ec7d7e6768bb80351f56f34b280563007231a8f52445bf7f0fe4d0c00e333c418fd77699a7be8548f60fd6e724472a209191b28dd146624

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc48d455a0beb0bb_0

MD5 74bf8659e81618187688878462882d25
SHA1 38b8b0ee436dd6bc4269c40ec1bba523d9a1e8ac
SHA256 0419c0b5eaa51047b5593973a3bfa09c06087ebc46f3904fab77ac4d4366925c
SHA512 47ed6086ad14e3d24eff2a6b482e6c863a0d7310f74bcef88c1a3de883d0a3e77f9611e153bd8985c21ed0ee13ca0d62a9bc95625dad9b183e7aa54098988931

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4b2a43d880862a40_0

MD5 f3d84ce31477414fca83e4a23fcd6511
SHA1 04f570391dac069a7753335623603264b70f4a3d
SHA256 b0b26475d453fad40ee6d5e67e178e6d72858c4de9077bd42b910ede7be3981d
SHA512 a3b3b92388706ecf1977005136de09376d7fb1eaf01c487c83650523b8ca5fc0d98fde32c12915d0f507017624bcd26cf0e7c4583ab8bb04faab8cefb49e3e9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1184117978bf8619_0

MD5 c79c5ebbf6d31e06128f143e16afabb7
SHA1 ad8d4f9fd93b4267bca49f5a5d1de181a1dbb8fa
SHA256 608359f3917e87b386cccf030ee47075222932934415c93dabbae3021847072a
SHA512 9de0461dfdff1cc7c6e75628834a004f52295a5e86a6c674b84db33ecce3f0cda7511ecc559f1e305cf57e5a964b85b1b399ada2b9366b3e2b44fc28175204da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7d8ed370f73e3fe1_0

MD5 bdb6d0684a0633e12ad0ecd9debd0e74
SHA1 a3a302cef533c1c73aae4d650543a390745c5923
SHA256 87a5de0ebadbb7cd29f58c2a9e2a07824fff5731dbc832041c15eb0f01c08568
SHA512 99c3d1f7c2af4a25ccca0211d42534ee8c26b4f569e1764e23ad8dd467f497bc44cd14cc8333e0f4856e2189e406ca826ff34ce6e217a03c0475d06b35d5c681

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a067c42b64722a57_0

MD5 3c170db135d34cb2b455f58cd1b5a2a5
SHA1 b5df4ab5226064e86179ec369e28c524c1412e30
SHA256 57cbc6918d10a594b726ccd099de5b8189fdc5214ec3186e54402b2d6b1b1a76
SHA512 0c3f76a66104e53c586d0b3c8fe4a8a495abeb28fddb24d50ae9e42019b17c78eeb445f5d8966ac621df7d3216eb45c64ec3869904b4582a5be0c6e017a0a396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\72022362786480fa_0

MD5 8fa5fd1ec7e9f0a68dc4ff16215878c7
SHA1 70a2e39486d0140da9e0f2ecf9058a876c6b3de6
SHA256 85bc38ee13426be3d510a655e486c3bc2e5a29ab8d78c6fec876fb1a4bafd32e
SHA512 1367c615bd58486e6f780c67f201a4b30c5f8750425ec21d66069f351de352b72ebbb6e35aea0b263f7093ee935b17fbd8b8b96ce24dcf95b056aefb0169e0d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a50aad6057e22c49_0

MD5 f21d2bcfaac7a04e75f53084ece969ba
SHA1 a204224624c2ff0be02b3362bb77363c87207083
SHA256 f11bbaaded668735e44080047d29459a24484385ffdf9d165681dfe3fa5bf371
SHA512 2bc2274d580a69a586cc1f8381f49c4fe88cec12ee7b1a62d263ad02e6db723db8555f24f42bcd3d68974f63fb91520eee399646792f0644c9f6f310def0444c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14475254aafd8ec0_0

MD5 881bc193152946be1861ecb7fa3c5629
SHA1 53d307dc31d857a505509b2d9d74a612d9045697
SHA256 ac6d01ecf2e1ae56e5dad5b6a4745027c318114aeb16ffad01da754734baf79f
SHA512 655ce9a753de3de365d05e68f55d66e1a16341daa0dc8b554a322c073911f7d2c944dc9239757a66b961acef701e59f2a6e78e71d31be4ac7f50fae0fa2d5417

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ac95a81059d2740_0

MD5 65829c4face3fb54b85dce481d6ccb63
SHA1 aeb6ce069598fe5c4de060caa014964c0d7b54eb
SHA256 fb740b3b0248322dbff0728ea4b109e139d88f8a7a92bb996adb75b1229f02ca
SHA512 154ce7083535e6e5f69d95af8185491351e59df6473e05cf10ee3b93d1d005b79bc306eb9ba3473c13d8759cdef719db45cc006f514704b6520a72c0007324c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\499b86fca3b4305a_0

MD5 11527dd860fb5ebf979360e6c56f82b6
SHA1 701641afd20fbb7eb8bc4500c2c5691ad74bf33b
SHA256 5dba589037da49b3732c6d83a6917912f75e8d9057afeaf4379120808d4dfd78
SHA512 d6d0dad285e7bf85075d8a5de2a2226af2c7f89ac0dfa0712ac3ad26d98b34fe6edc2965e1cf0f7a4113588d6d039af2a8b84338e7c23e2f0e82a2ecf6421bed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\09f4462215482980_0

MD5 7d47f02ef6d1a5bd8ff048e31c5ebef3
SHA1 05186cdaa2281672a0c6f455f6e4178c6c38c902
SHA256 43f6145d37b650f4a6acab146b82a0e4370db8043298924a8dd8f0a721688046
SHA512 69d6c534fa3a91ff436e75e81b50b343df1370cc3edf49966f883af393a63da5bd76f8313dd318e9f58b07ec24f57c9d899e91c1dce07270cb00f82b8a584dca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6c7f87c683148aaa_0

MD5 48c47e748bdd36d44626f7cfd5dff66a
SHA1 d8bbb3684a5c6f5edf432de9c35f816735b0331e
SHA256 4021d446c5b4e18490b0e658788b60abeadfe17b15c88a9feb6dad169db804c2
SHA512 744b6e4588b1615cdef3b1f3b8b25a88e88a93e1a7aaffaafcdde45f6f5b3f91bfe25f99ee4093e623f2614ea47eed4c3111d111bf8adcdd2931c309119ee302

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2b76d7967c518e37_0

MD5 88e8b2eef29ca9ca6a11412a3bc5c49e
SHA1 3ff33f27cb5d375e731997c7db2f6b4b1161ea7b
SHA256 d5cb46eda297baf4aedcd80cc9c6984224bc0222de9ebdfe0e9172c209c967f6
SHA512 64ad2c1f208bd8d6d6599c02a1c555d84e4a329339435ed250a7b5b909d94caebe1f3a07c4b53585d7c12a337b3896ddbdff286b7830aa26acade2477c91cf23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\484b77469dd1f078_0

MD5 7783350f215c3de4bc1622f3353c519d
SHA1 318113e6521387479d5d9374ca7e7df2291205b2
SHA256 4971e6a289d149e6542b958ba645c58954d30e3a80f8e63a08a6242b64d79538
SHA512 59a1b72087337b35487232fb2eeac8d3eaa194aeb49b4c39289243280ed482a3babf2f554361a5c86f23fb2e576617a83e6602701b452f0e5c57e62946e244dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5029b06f11a1b2e3_0

MD5 9094cb42396f415f60b15ce5022e901a
SHA1 708bf608149818e57f901370bb3363052158fcfc
SHA256 4c2ae6614addc7411c4cfd9a739765e249446694fd72d43723a9b9c7ecea6abd
SHA512 e0acae73c77db28824e6b9135e3d140f1ad4bac0410d67a495e44a656c845fffccaeb486a6c6f495717708a556ef0241b39f7d4bfba4cf25379ef2238550919a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7c65c5af754bc363_0

MD5 774f640fea57bac28f604e8f4fdfe899
SHA1 0e6e23a99666390839dbc349a980d7bef33a3efb
SHA256 a1a7d9c8dd68ff7d427313b447d02ff826dae3996725123efddd968313ad1dbf
SHA512 cfb53334ee5c4288775d2c3b5d8096023dc31888e11fcd4e58e8a06eec9b3a89d147fad6b043905d69be165fa59acc5e2e6564d50959ca36d3765e25ae89de9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 74f7bf4898cce461f767700e31d032da
SHA1 dd2a09872a607256313ea36e47f02156698c8fdb
SHA256 f4b934ff32b7e21f64ba1cc03d0994c32ab6ce51a0a441f6ee8de3d03ef6bf12
SHA512 c65998c34132344060a00f89766dd6a3c0029df7ac17ac827dc1903c74cda055c0a35a4bdbf651ea0bc21b3a1441bbae5cdf1a9b934125ba1bdb45b11a38cc4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0c8543dedcb7ccd1_0

MD5 8169c4bf7d499c043a9cbcdd13e21194
SHA1 2ca61f7ee4191553c881920e99f6efdd648bd310
SHA256 2aff8427baeac284cec7225f9613e5a87aae6cd65b412f3be89ae74ebbc792e8
SHA512 f971d49badaf9ea06e962b52c853d80236d2b017e9510d39cdb17340d8e803217c68ac5815b0714e0be40819daa3a80af4a1e5ebc986567bbc54dee40dd8cda8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c93622985013877f_0

MD5 ae0c552dc025635f737af48cd9260292
SHA1 a01fed952816a366fa88bee0ed64e957b6b7eb7b
SHA256 a08f8fdeabd73d446c036a0a7a7984a13b68a306e34d7fa46c19a8ec0ecd8fba
SHA512 93c3f14bf3fe31d55cd528934f8b8115525356844d803c2f97b52454eceb3a92899ede65ddf545adf009d8864ee2128b02bc54f861b8c50a25d2c6fd02cfb939

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\890341016b4cb769_0

MD5 a2459b93b6a0a74e2bbecdf53424f5a1
SHA1 ee5bc079598c9aa9c386376e20f6e7ccec9dd4e1
SHA256 48d23cd5c97488cfed8486ff41c34d79f0fa38f414734f552d6acce7d1b04f9c
SHA512 d11f96f8874abfe4fca3914be1232cfb4945f9d735d98e3434b6234455b14dfe8ec7eed8fa0fc63a19cf8bf6a8d900ced925e7f6f9019a2e1cbe1fc2fd48dd19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ea857d7190276a0_0

MD5 99d73aaaa1bd85d0a7dc0b8cd962c1e4
SHA1 e7e1ad4ec0f2fab820e61b1d98346613cbfc107c
SHA256 7f74aa0359089d93a59d335b2da23b1748d2ca8bb9eec3e2e5320cc988c52948
SHA512 1d37a5335e39ed4a7689336ac6513220f17df5471511812f47b0aa612430856a477c3a028c88d513d69d3a5f21b35eae1d8a967d324098e5a98c77bafc11d178

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\997d66cf2e10a48e_0

MD5 5dd245e7b421e54b1ff2b8903f107ba9
SHA1 a41e3c2e7a463b60d844b70e0e3c807d05ba720a
SHA256 30dba444968f0da4e5bbca551a8e122a90b6dc4d6329dd9bd69b4dcb10b7442d
SHA512 9c502212fd8428d700fafac6f28cfb433f70750bddebfc3c517db4409340b6a653cc218f2315ae1f2f04c3f6915edb75c76f3aca367a0f55409645ab6817d4e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3c1b71d6c92f4ff2_0

MD5 7f1fd23eceae6782f973732486c45427
SHA1 2e778abf2c5ffbf2a9283de9421cf019935bd416
SHA256 b2f6dc8b86ecfa3b4ece923959fcf1530cfae10ce1e3ca65a0dcb3724f7d24a4
SHA512 53456e76068b13a41ec9b64fa0bcc9f91ed60eb951fcbacc5b9b3b5fcab5d3daef577cd9758b19d9bc528e8d5c81e1d04f1c6b69c074b03e025ea07252297533

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\50e7ca177d06e22b_0

MD5 800b6aae23fd2e49e087015ea4f93577
SHA1 2a01cd4eb5ae8a3ba743b0e2c35ca88498dc1ca6
SHA256 fd6dd64e2b0ad7f1091a4a92a5ee0d0d2630bdfa10ea8cebdaa937df3d7ce625
SHA512 fc3f4cea8684473057ca4d60e7863e3fe515a74d20d362f3bc85bb8a16325c19b108e076762479b8e8496ed1d3bde0c50a8390d9998e6f5dd733ef562d804e7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfcd04b490b3f457_0

MD5 ab1e4a2d37571501d1f10b87d91b70a1
SHA1 08f80a4b771ecb196c1b01a91ba426417efbfcc6
SHA256 866221ac8bbcf1c60431a15686513649d6493286ba7bfde89acaad6852350891
SHA512 468f5c8fd5ce766a3e8f9e85dd0bf29609a3db3c0a124d0a755ee725197817dc5a2e5c67c8cda830f0dc3bee6dc49b03580c21ae4a4b979b7d50a074a88f798a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6f8a512a3635fbb7_0

MD5 01f139ee5cc079855b24eea2ab9790a6
SHA1 a19553a50860bb1e918d842b915315830188f949
SHA256 ec8dc4b408e5fa1d89cee519c7d95ee9be5c46b68855630fbc13b42ace1326cf
SHA512 55f36734689bd8b2ecd189c7c620ed0e500c9f2cdf066ae37e61ff32a4d9c86455ab05b034901380b95fb6be46f4d861535b644008465c257452f203a5fc5ecc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4daac663d0f90125_0

MD5 3f7f96f54e46336801e03180108cd9a0
SHA1 bb36a22a17649a5b89426cb2f32eaef34aab1fe3
SHA256 173a3d1e74fbaa661ce678dafb1a837edf9bcc75a7e3a0dd8217d4476c29795d
SHA512 eed860a24921e8074cc9c16dffc80947f1074e3ed095b77c0922ffd8bf6f56545f47b68997489f6325c989b004d621652fce2247ce159e6ceaa55eaaa8acc45a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00237b8e0e6ffdc1_0

MD5 3a6d01495770eda585dd6f1064780b25
SHA1 705575e13d7bc931a612653889d3a91827c11ddd
SHA256 412a296fc0aae9b7df88ea0643495f14f5495f195b771c8c2f55555d39ac6d56
SHA512 7541bec262e7c4e23fb901e94b0eac9298fc4a45adea5fb8a321e895420620ec349025387e5e12523846b6585e7ab7621e5d49f4f53093fb26098b182ea68f85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b5c0b0d2ff0cad95_0

MD5 52765ef5c6c60af9a82ebd5195ca5589
SHA1 ef984394e1c9bd263772d0892a5c9f98238c5fa0
SHA256 e965fcaf3e861b030018ef7b7308615e1ce8be5eba943a3a968dfe6dac27b797
SHA512 2dbfa25cdb9ed804f3e12706b6dd1536afdcd4259e499a5a9a4bef0a06104e0c5c4619925c0f2071a2515586d748790810f0de96e065482fe6e3a7ec03b914e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fdbf9def3186e82844a2da01a539fe72
SHA1 d7d6e63a4f318d451c32574327701dd4d60dcc6c
SHA256 854281aa112240d92eb45c1e563a23efe46381ded4eebc13ca414a400971bc6e
SHA512 dbf016f732031d8acfcc6c2b7368149327d6527e513add2e9856f903d1e3fde02e4740bf78f98f0670b7277589fa5fe0e105d1a2f2e67e46648ce3e92653bfc7

C:\Users\Admin\Downloads\Unconfirmed 238623.crdownload

MD5 9e9219a816b674c7657062894d61009a
SHA1 18aa52d623c5aad1464b4d1f423c8ea7f2e6b814
SHA256 3888853e35a91f284edfbfcb7e568124736266c923645050529610edb626d547
SHA512 e673651d9f53a39f48cb7c30c112dd6026b423e1f11b331d43779594fb0fae1663847ad0b506dfa362f8cd2ea82c953dac4824c65c1d5cda61d36764cf5a3047

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\JumpListIconsRecentClosed\57e0388d-ee97-47a9-9177-0a09b0cb5694.tmp

MD5 21f4df4635f9a2d9e8035cf315ba5192
SHA1 d00f54f18d424650aa9ac330588d96722e42bf8a
SHA256 cf886afb161b5fcafa4da3a11244970bc82cbbcc901f36b4d6bed44dc14ec034
SHA512 57feffbc2ac512011a62abaa638016afc943e0b366aed9bb86233ad2db588a1701695ab935d4a0ffad8c47857b9d72c8013451f0cf2b605dbd706c1eff413754

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 c354cd31e89dbbc1bea4ddec9e57cdfd
SHA1 d98faf950065da1198cfc1b7ede36ede851e918f
SHA256 ca3bf693542ab86de9a22d0589c7fee4dc31a6ae38a3bca678774e9ea37b5fcc
SHA512 906643c651014dd61488707633c6e15bc2b256370d5a41247301c0e0960a6beebb94c95de4e06e3da7f043f8ae6466e126c523f3143b120b9bdffb3e973160c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9a5501e2bedec5554ddad88737188322
SHA1 0ddf2eb19f9b70aee33d8879d02b6d9ad353a9ef
SHA256 0dbafc329fefae11321a4278b08185cf224dc6fecffe76f7f05e5ab76f11b9c5
SHA512 e9ef0bdea96c304d3061f0de4583a436181e967576693b5c794ffe99d73fd115924b00dfa2cea9b4658a60e4086f06d2ca025f98f8b7a8077be3060d7ccd795f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 16cbf1b9892ef5df4d70f5b1547f4690
SHA1 a3dcc90b9ee664f4deaeca65a0e6602e989312a6
SHA256 f312a93250bf37c4e205524a7989cef0ab2675cc730fa74cd1a7b87c58a3e8b4
SHA512 6fd49dc096d6e96f6c99aa2612ccfd6a6805ec2021640cfb3c3d89bf92daa0fd5172eb32a1662e6d99ba7ea3183df27f0cf000861e5a2af7f8232b59d315e509

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8f76b694a44f064f8644032b4120d944
SHA1 c18c29c855944f66d2b3291a3b9c64fb239610a9
SHA256 09e1c08429028217d8e9c8e479c22d4f36a22d7022b7862a31538416f4cc168a
SHA512 c1d6c845836e6ca2e855b678a787f3dc3743111c02cf0407154191534beb89f35c471900dba3fcdf8bf541827df23fd7c92efe7b51829d6255f5f8d373dcbfcf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 243d02b8a2dba37eaa000c25d2a38590
SHA1 bee3c7ee5369fec0e58a1a60c1373a44eb1bc6d4
SHA256 3e9b77e7aa02260468fba4a070e3420205fe60b4a7e424c18da6baaee75876b6
SHA512 bac5eee0f231c862636e77129d49b1678b88c704a662e7fe3a494185165c5d24434f48751c9ada4328da335742bba1d84805ab0ed7ac002295a535dda63f1a49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a152cf2fdb68fd2_0

MD5 b7d2c0178d9855268b479b8885e63a69
SHA1 9ea01df058a5df7bd3c32bbca625a8d5ba2488c3
SHA256 be039e56dbaa0d0bcc8931d52d13bac870312f1b3eeec55a6f8850d1bc53892a
SHA512 6b4278b8cb7a21cca8cc559863e860acfaa82ff1d069d1ae66424cbc087fa3099f717db1665e9040a2bc370eebccf6c3a241eaea4b9ec9b16ca673105c9a085b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ecd635292dc9cbe6_0

MD5 774b4fe63fa9d1648a5a2e6e8b9662d7
SHA1 19a3e0a9834c82cb66b561723a635fdc1fb05af5
SHA256 5d90b9c1e6739f50c074e451c28e7e96c9c3a8b918c692eb57011204d4c6bcdb
SHA512 7d9758c674cb9378bf5ce2ead065e8b48ed24515f90797cd32297fe413771e1f703fc71f2d53e12a01b55e96cc0861755f60f24359e60e07ff95f34e8b9ba51a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa51448666d72d26_0

MD5 212c740d1950a890fdce1f4f442f118e
SHA1 3ef6dc6b0cf879fb7ba9977839698d18e19afae2
SHA256 e621ce3b93d86a370d591aa2fd059193e756b8dcff94bb16348f415bd7c5adf0
SHA512 33b60a6dae92c87fc4d2ab59bfc851362e99c46fbb1f17d05667446c09c02503c72820de070376972de0b1f356eb5ce15ba3763ec018fca4e475e02076ab6020

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f8ad7366468e018_0

MD5 b2e726c99c5103ac7e9087da02fbd636
SHA1 e53728dcfe0af6c00a45cf1efaa74fc30183bef5
SHA256 0d5f7ca279106f8e62e72069f8c8f1edcf4b13ffa790e8b6c5928ef30a630832
SHA512 f2435936628c08871242734bf5ffc284d906ea6fe31878885d387f8bcf59a287308717d2ca02be6a8593002e22f3ca5827af32cd1de1fded01dca6b6be8854da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aaa8107def98c430_0

MD5 9bf15117ad4a17a5a511cd68afc7e83c
SHA1 ec8d903745842033da20414fd9116a6c333f3743
SHA256 fdde23b8680227faa2b63ea3af212f0fc8330500b16f14489bdf833449281cf4
SHA512 ecca73e4fa4ac0988466cd126689169bc6abd41e2b8ffa28d4202dabf93d87c30e082d95b2c334d20f3a5a090b94e0290c20cded3b9d720e0a043b030acb524a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd9104cced1b007a_0

MD5 f8b81d2649c2180da37e898c15ae2249
SHA1 9cff682777657726623701ef8b6a0dd66e34da5d
SHA256 4ae2c12f628eefed688ffde1dddf615d5652e1b87b2cc2a33f8fde55a61fd7a4
SHA512 788b9c88c9038f8cb30d718c8ed156fde4bbc8cacb222957ab285f552bd64225f78c411d8d54928c4f5b5d36c8ea0efeeea2b1791fe8eabc1baef905fb6ef3ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bb1fa5514b3107d0_0

MD5 37f849e62a5370c9011ec798c07e63a8
SHA1 b924833b023ef4b1fb4a0789f9a0780892b240f9
SHA256 6d02746948f1acf2fd34133ab829f1269f99c8b9c8b1a24666890b830b225fb8
SHA512 2d4330e561ee638779003ad3750fffcf1a68c3bd788116d4235b8f450881c7ef408ec1ea47bf591c4200b8f801328b5fc80bf480d671a3a9f0bd97898865fcc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ef41f1c4bb79f61_0

MD5 fb176d130c2d58258a9c7752729202a6
SHA1 43c30e0b8fe7ccc469fffeccfa13ab85af7a78c6
SHA256 6eb7b26fcfa15f7be64e796692378cccdfd3e6c647f39a04fa1e8659e4ae734e
SHA512 1056569b3221f0637bf51c0c44adeebb2fcc3f9ede51791ac3ecda5b36f08b1e2122d0f7b1aaf56aacd02a8b5f05bf105a0ca42c9e7e8b2e4bfdf713ba69da6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ff71190970d9b86e_0

MD5 090d7db9fbe439b6292b45541789a54d
SHA1 ff09ae5fe38880edc1e981a9c1163a90ba6ff106
SHA256 829634cd4edfdf9f4325cefab61669493d678cdc9c136be5cc81056b68c0b51e
SHA512 0e2bc2e8689c74aa453fb411b59c677774eb37cbbc95089aa2bce226a22d12cb6c20ddc3b568bef56d7861ef3256c852fa712f435130178bba43caafbbf6fc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\05216381df4e3dc2_0

MD5 ec67b5d0dcdb72455fdc91f1cdbfae79
SHA1 43bbd982d3d9e607ce1749e0d9bb431d164a8390
SHA256 518b6863ad4e3c1985c2a6dd162e9d80e6c606c09384106e79c31691ae31d8db
SHA512 9e42147ea7d131d12eead9bbaa80416e3b794291e86118e1f523330bc76b925d5c1924676b2e3059ad98724347e5e986217154298a4d44d9112ef5b6503e7fb2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f6c2ce1fbd0acc4_0

MD5 50d77600209715d50caea7b63466adcb
SHA1 7bf233d8da204e834bfd7927aaaa3582cc3fdfef
SHA256 38bfdc29135c27ceb6841198ffc8782ae02dd2e1436661b083f2039e85d30aca
SHA512 7f73eb8fd7023d822caa610ce41b3580c8ffbd0b8a7e468717e81123262913c959bf4b58b26c28a348facab212acfbe4caf53218a3302a8c0ac928e4ff087d44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1be48bfb5a7b5713_0

MD5 b665aeba2e7beedad71fc0f51240e00c
SHA1 7917f92e636d3cb974f93091de5c734e01e797d0
SHA256 490e6f13f4f04b4d10221252cb8a625004bf8860276d2cd4d237387137cbe608
SHA512 eb928ca226500815a49a0fd82e77b0fc5d743c832ee9753ba3d0432dada42c8e96a14e41ebc1239adf51b25baccb2036cd3e144d81777d76447a5fd346cdb611

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83b5fe6053ca8299_0

MD5 ac61652592b9d1696b5bd520d368e514
SHA1 fdb43f5754e90c021ec10c4540a79517b7deb9d5
SHA256 fa21845f3c69de1fa0efe6dda86626b918ff39265fbd5de5c8ae5a2b07b34c08
SHA512 0dba7b5a47b6480f3e07be4558b9cb4c16ba2322508229b61feb2575b4bc4701289eeca5f5fe3d960ec84a3ce44e4bcde3191f6825fc6d5d76c3a960609841a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\52b80c9d168f24a8_0

MD5 2c5eb9c025c929ec6fab571a0b27c7a6
SHA1 66fef67f0c61412776a70c5f47e958345bc93557
SHA256 8400f92acf9cd29774b1f0889dfb74986937c4f9cfcb86819476a64bc60c354f
SHA512 8ac04afb2716d161820f57f0177ec9daed0be38717cec9cf3d52efd26732dbc2c148702556105cb05f7cb00091e7f24231b1ce1df8df7c42064d22a44dcc55bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\180e414f012d8ae3_0

MD5 fc60e41f0e2dd48ae1c7306a755942ee
SHA1 e297625aecffea8d5c7a6b40d51575355d413599
SHA256 23a28631d7cbe2e61a8e91162da3933d65db0449d689cdf234362496229de014
SHA512 89688022d8d5db86329959eecc441320728fa0dfcd0e18d4d491f2d76e5478d951d8ae7c548a51adfadef69e1f53d288ae1f91e1c31f2d25cc0d3161b7f129c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6171badf8efae0f6_0

MD5 146af28793071099737c7fcc2857a787
SHA1 7fabfb270ea8e6a2680d246b2dfd14de021911a5
SHA256 a4bde2db63645ff7a950bf94a785395b4f03c0b10c7d27d9f8f9c16df001df65
SHA512 bebe2b960d5cccfd1c135bfcac4d79687b7666ade5d123ddd43b14518115f8009f92b88e3f31c8a7d48fe5fd0086f6a9601967a89c110cf57706a3afc0d7fcad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ddefb550a28cc70_0

MD5 c67f454b8938de2df51e334c521db7cf
SHA1 22a39b6224acab9273307b1cc9537bfc433295fa
SHA256 7af2f2ae2ee7033afd9df1491d532c0b7e5bbd49241eb173902b05f22c8076dc
SHA512 3a7348a6f9a0c1c7d897504eaf5ed62c6ade0d6e7a024fdb0b3bda43d85689f59652f0b9156b4e4fcd0f99ebc413f7f7d9e2970a7028c465f59a2cde4fd8fec7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b179264a7e1bc021_0

MD5 556fc7d547b2725a6146149eda38068c
SHA1 c0b61c89de428a453b7c735d04ce4840c149cff9
SHA256 1917d5696e55d3c8ea1d14ef858005a867b45d65b2a3937c6c49cb9c2b970c5f
SHA512 cd96f478872574e708b1e31ac791c6910fb1a6fe2c064be89b0b6a44e5447e942a2c5b9398b4273327a2fe6b2eae134668e0d31ca452514d729ec433ff07b4de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a5dacef874625585_0

MD5 4ab5e0b62d0caceecccaa98a1bef947c
SHA1 986a55a8d50689b7cd111bc52920868b92153562
SHA256 a6e12a73c162fdcd202b06a7a1b56b740a546d8aaf04f2f7c22333f0074f2937
SHA512 40ccff25a1233dbbd6d28013c6373f89a98039ac6de1f52df6ffefb9fe6723efb04c3e85d5d20b6099e0bc76366e49c9bf488d69193bfa75e0849072bce871ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daa0d1be2cb0f56c_0

MD5 5871570a5666c9d016e8d322ffbe7725
SHA1 a22a1e91ba5344a07574413058851508ce5fcc6a
SHA256 585bed078208074a66ce9044e8f7f837395dcd2a9f96d5525406d62cbfa187d1
SHA512 b46bd4a30e89577b0404e596eb84b4bf842a5d6c516d0bcbca6dfa7d8ecd68e523aaf452e87541f33d855edb65c1365a3c44f8011387165be86880e781648bb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fa28549f73acd32_0

MD5 0525483547b6c6494096ac785c9676cf
SHA1 3bd3e026088e0039f5c17f68cbeb6547f6f90354
SHA256 8933879772ef189a58cdfbbd2138593708b86caf74314e8bb4a2f94f777e3db7
SHA512 030e0a64783315d82d7019dc8aa2348c9b3751b4cfed2f9f465edd130f8dfbe49772b67af18e8b11006969510512c603179f8eee9565baf8be0fb9c4d6bcfb89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c816907db975c5cd_0

MD5 a242378aacc85fb6c44d911dcb11ad9a
SHA1 f7d2b5b45aed9699e2c26df08cb44f1444cbd045
SHA256 df5d20dc997e9e4e38a1201135ad0f8c2ce1a6cdb556855b52c1fe6a5e9ccb9a
SHA512 c212a78543c84cc775244a71db64a4da2a4cd460c24a9559cf64184b02d43d26d3f63243f37408b79fdbb3e212fecfce9e644a5e12e59c6ec254ea785fd119ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\05f98f3e8d436ff0_0

MD5 652cf36292d89b70b7ebe97fa4d90af3
SHA1 6f0ad780bb4aee7fc7273ba5b8d6a0c80b217221
SHA256 b90958d3ba620dff38e96ca286fb4eb07a606085f21d7135e6696d31c87a1c08
SHA512 978787508eebbf77591682ad3ccb359b3f2d18cb2018c1e615b16ba4a2d3b4a504da78bdb5bffc709efc2efb3e6fb0542c7c8d8a747a70b16c2bdb06c6662562

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1eaf6e5ea274b50f_0

MD5 2c8977ae2794d6cfcea6efe7834499d3
SHA1 af666dee9492cda2d1885adf9974bda98189203b
SHA256 a794551716f32d2b76b1d3a6cc893e9e6520fe900e755d691bf0d44a36c89ec4
SHA512 402b1e71dc2ed8d5882d74014a27bb26ceb42d30e89b6b26c4b52920e805e604657f617fcc9bfecb2755537ccf972cf94d69021ff8e2913067cb5a334e5e8294

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d81792ac003009e3_0

MD5 5810b03a8a438b49a9f61fff76ba84c5
SHA1 359c4f2c593c38a70b2b4510d9b4fa96ab6f8d94
SHA256 10fc98fa6d6e38e714ae57e15ba0c8ce15ebb8b76224b1afd833972302ea18d9
SHA512 a0ae4221203d3fc54de727c01a6c16e02c4d24f41fe588a4132dd130013bc249be88f306efb8e7af068c6d489374dce9ca7b57e468f6e8e6e3a6a3aa550382f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 32d743f0faecedb518c97d1b71d7566d
SHA1 600cd54ee8d6e408b636250dbcaf120397845b03
SHA256 0ae4a8ff95314250b151fe17d2a6186a4b0d573707cdafa0b5cbd4591a9c3fef
SHA512 abd280513487229730e22fc528c877ab9ce028b977814b91dbe8ff6c51a38649faa52ea1e56fcf68ff02a490d8f4700b87a7b1867e133d6fe8768aa378bcb442

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 8b17f15d21ed2491c300dd9f8f45bc06
SHA1 0d6b16a81ced7b74780886ee1b16a39fed8175f5
SHA256 2a017d10f6a8cf44caa4209ebcad7a56a8cd7fddf35808bd9704ba22b1a13209
SHA512 72c4a442645d7b2cab7685ad98ff01c124dc882d3f328c5fd1515df5083554b921936d21dd7c5524ecfa849b214c9503849f032d9e6c1f0cb7afa351210e4c04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7cfb8c34ca76d3c1b72ac7e50cc0c45e
SHA1 44105d9eb0149bc45fbc5fa18e190c3d02b6241f
SHA256 640ea29a055a50a3793f3f5b31a44af7127d1915dd985dab314ec8b620c082ff
SHA512 fe200ec53dfcf8887bd061a029a24f6dec033b4e30e05c86ff178adbf7d25b1f40634c5002ef5f1c742c8c1b96f5e32644904bb6a65d4cf81b811302e948e3f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 47ff4e97da702e0c51c0dae23f47a409
SHA1 f5ab22673319292f39fbad9fef813419a971e903
SHA256 e01e7a4643a1a04e3eac5c751098610cf0570854bbfe4d3f6cbb10320c2b892a
SHA512 07a485b85d83a67500ec3a9417d32c58b2af0cbf418cd319cacacd674357d0208eda45338f8c2f1941abb9ee1162301b6bbfdc77287fa102423afedf72fed78d

C:\Users\Admin\Downloads\Synapse-X-Cracked-main (1).zip

MD5 3c9fafe96276b027a7d6bfe983055de9
SHA1 389e4484a17e310c5aae410389373a4578608e19
SHA256 634b7c5fe6ebcc3a9b9f810c04017f74142d30d4b88f9a30afaeb1c5870dff4f
SHA512 000e8b96915e26051301df8b3005f87249f68aa9bd555e6447ecdb86db1bbc279b12ce1c4d5a6f9b076fd2b83e36330609f32093e59fafb82251a4eca81a9f4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 03785ac4a6e0682962defef013c940db
SHA1 e48074c2ca6216f9db187520954504d3ec4522d6
SHA256 a28b5b2289a057a627cc2ad2b284e7e675b335d653a8d39786e03381daf7d194
SHA512 cce7153d9c272a70ce00233dd2c0078631420f260a4d59b8d0642b1f9c76f5346658bbf4a96250c598311c54acbbc3a9c36086c1920c288d2cc98989c7bcd281

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ac95c8691ea532b32c4098b0f4ee0f44
SHA1 3abf30cf9eb4f77b2448ac73bb55ddc4cc5fc7ad
SHA256 3f096812e0871d268a59c50fd2a8e1167667ed5123730a4ac151811e90df8966
SHA512 a4666bdc4635e18415dfcc435c886ad4608f4c2df91b625ca3434d8d8c6899a2072a202b19fca917eaccc2770de651ec14247636ba8e6e55522767218e114bb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 1af2568bc95672393c5556625653d94e
SHA1 02b275aade6040b34a274ac8a61b5a7758b2bf17
SHA256 79c921fa44079adf91888ce451dcdbfe03063934e622e06de32d0b91930827bb
SHA512 aa9ef862af70b72afa56efc6a670f9936bd7a86b8cc62a713b0c1bf62f8d64792c2cd89ff8856fcc126ef4c28887657e25587b8364c85d116b5c1556d57977c4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 58c45f0798be93136e6835d50a302b39
SHA1 824abf21066edd0896852ef23423fa6afb156cc3
SHA256 0fd8c707437661a5767add6684d5246303c9d76a92416364689abbb93c9d352e
SHA512 5f4b06f5ab3b21b3e9cdb6b7050941df77f2388c0e3447ecff60525091b0c734668b43998671da89238613b22d95a5ef9803c2ae468c32651401bc21e94bf227

C:\Users\Admin\Downloads\Synapse-X-Cracked-main (2).zip

MD5 547dc9c49a1cd73ab654e4c2f7a35423
SHA1 afa85e3306d5c47f94e2f468870da632d2ec6fa2
SHA256 c3f8e383a54f245b844822accaa146c969da9f5b44579b21d34497d871224a06
SHA512 c3a54f4fcd41f283e7a688b6dd0dcb083d7e01412163d398791b641ec2919c28f0a8fd480a706d14934fb3f4a3dc3894f5fc26367840892088ccb685c20ed003

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1ead5ddb713feee7c31a816883a70f56
SHA1 b01ea05388d5a338b974b4e6aa7a0173b00d33d5
SHA256 93203fdc28369cc6988f92f7af81a99912896a56deada66686d692ee23484b4d
SHA512 1166c896961bea4f8aec9c4425f488d7c5b9454e3b03ae01a1c811aa08ca6acd7d7bc308cac87c59eae60298bd7416bc3fbb78a342870aa29fceffee90c0fa30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fd49a8350296010d154abc113ed4ad7a
SHA1 70c2fded81df7df64d12343041e704be31041ca9
SHA256 8b48b0916dc9af8e93b1667f734a604d54f514318634ef5fa2ed8bb4bfd58881
SHA512 aac146311a016f2cc85a968ddb0e931445d1d678e9ff007258eeebd0799c58d32486780b8635c09bc89863d45d3f0bfc09d5427a026e1b04cd35d7c5d2e39af8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5f94d057629269394974147de29dac02
SHA1 afce91dd44a675e4dcae5050383c0a47d5a52a2b
SHA256 29e4a87bdccb10bc9bf3d18163720e2c74e387d9893fce03fbf1c22b021162d5
SHA512 86157b27bcb799187a8a0a9fc9c7265e9737746665a524dfa6f81fb25ed984e115b8690c26010361fe6fb65bb0df048b9ab9ab67de94a146453e165517b5618a

memory/3096-2956-0x0000014C698E0000-0x0000014C69920000-memory.dmp

memory/880-2957-0x00000237B4950000-0x00000237B4972000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_4qi4plvm.fms.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/3096-2981-0x0000014C6C080000-0x0000014C6C0F6000-memory.dmp

memory/3096-2982-0x0000014C6C100000-0x0000014C6C150000-memory.dmp

memory/3096-2983-0x0000014C6C150000-0x0000014C6C16E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b8fae35856c412397f514c6c937a416e
SHA1 0fdcadf6a2c868bf330df9c030c9bd4f7a21d8cf
SHA256 a07ae61b2918b5bf7d0efa8133c2776d916cf9e18dd4ce7bf2617358d545f01d
SHA512 755ab6158fe5930eaa26c7720be39783e72d33ad112f698a9d468b84d3b1c0f836cbfdbe7e7d1a66883b35f50581d631ac48114daa774f9fde5ec2c0e0c4f515

memory/3096-3028-0x0000014C6BEB0000-0x0000014C6BEBA000-memory.dmp

memory/3096-3029-0x0000014C6C000000-0x0000014C6C012000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 bb3570b9e66f54a261c5bf07c0a4e058
SHA1 6a06758e1451b47526bc51b4eda7ccaf73dfd39b
SHA256 7b78834345b9ac0a495d84f1448967aa3039572edb5f95ca96e5913222e9d515
SHA512 253fbd8517141df82aaa590d723df919a6c40942c32750c22ac687c17400991adcf7c05de222b93967a7dcb9ef94c44aca30555201c7d9e1b6c23df61a7ccf15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ed4938e14bebe2b14d85831c986a5927
SHA1 ee5b997a349aa76f6e8dc8773752fe9afef25568
SHA256 f078765e4397fadf1643752755ed80a310fe9c6512b6faa4fb6b461fd5f2ef6c
SHA512 f635a0f7bc5366a7fbf9035c4907735be0d5ca72e9ccc19a68f6163ae48b88efa494e76ea4f9d81811cde3cf1b86a866bfdf80c242d9b10ab8692059df1e5d2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e4b736f1a4527d6da30cc2e36486dcd8
SHA1 bd73610c5c0ad1bca9a64534010b6580b5e19442
SHA256 048818807499b08aef75221699686e7dab55074024478b771827c180c6a96cfb
SHA512 49e6708cfb74982db1fa7a167aaef277e5c5a15d0f864eeadf2ebfa7c99253c6c551c5826333330d6465ef969e3dd8f01c4a9192fd06c78a520c26cb4a533f3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1184117978bf8619_0

MD5 0c80f58c5b2f647dd4c0d3b4fcbb1fd0
SHA1 82d30c9438cf5e448e041877c14df6f2d64513dd
SHA256 5f2285ee4cfe219799b0d12b070dcaaaf970c126a2f8dfd7f70f7f961cc81d61
SHA512 dbf2131a01600973048e0bb14d9ccd365ecb6136390ac459a04a7a442b5d768c0757d1a87004ee97520383fff05c4e9785b956c3560bce312e8f8054e7a77088

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7d8ed370f73e3fe1_0

MD5 89c500a47b5324481afd1ab85433f57c
SHA1 7eec0ccebd04506b88552b90901c3b4e9d277b71
SHA256 91dd6a7e94353f393cd99bbcfa2cc57a7f4c849392ec0035640ec285c2db9ba0
SHA512 6c6252780791b05011ba36ea0c76c942e932ea7c944152552b68db6952cb55a22cfff0fadbc9cc47b8418a39a8e6d637a6f072d68c9d755c5342eb89cc3596f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a067c42b64722a57_0

MD5 8221d92803fd83138b7854609245c0c8
SHA1 2cc44fd4a3ec1ff3b325723a1dc13e61df436115
SHA256 31941b538d60c4f10cd65d41f218ff533261ffbe6dadcc5281c1d44082af1d91
SHA512 9934b280036321ee0e4bf18422afcaadf994a8397752705fff77f41c37fe51f2e03abb90fdafdc7848b18f5bea2631542053583d1bca7f397b2f2df5eb127c00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\72022362786480fa_0

MD5 8f73eae1a9dfe7c6aeeefedde3e760bb
SHA1 a664ae7384401e393c33ad2d2549c53c29eca32e
SHA256 ff409932ab68010912c4591c5573208efc14370b415faa5990209b75d512466a
SHA512 9085ac19702b05a8f62dc799be3178f3eaa475e125a17cbb576256ae6b63fc45dc388976fb40c9ebe1e9df7acb3f9caeebebf71ec04ebed20566fec9b9d719fc

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d0a160d264b119af998631c2c63519b4
SHA1 3eca9baa28489e5f7730f6682cc1c0674c29f0f5
SHA256 21616954163cbfeeaa99df68317611662dd396421c9d65e285b034efffec154c
SHA512 e54df80bfc42bd72a16fc37633d915f04f5e5b8a4f9f6ba1488299e6c228813d94fa4933e6a5dac0b86fa4889a6d0654a69b785942cd4fd4404565655d16c535

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dbc9600cb1b34eea6537aff1e1dd528c
SHA1 c514b321458bc58308d00bc81f6723e828b39eaa
SHA256 f2ace3de0ec486b70d263a797f8e5ceb34b79686a1e63502d3b923fa493d0178
SHA512 2dd42e2575995396709525265512af5dbcf613f8b1c0048a062d969469c5d48200a64ee4d29e89b02d489584f678b743614a67d3c6a17ea78d5264f229de11a2

C:\Users\Admin\Downloads\Unconfirmed 612803.crdownload

MD5 2fd0a111f87462c4b43dafc0cd4c9ac8
SHA1 e5188f088a93b0694832cb03c5343d8d530edfd0
SHA256 2eb619a73fa8d53889a23f6ca26630e20548113875d4ddade95848cc0b910b1b
SHA512 0a99767c9964e0d0de3267a3da92eca18a597da80040fa04c3f162b4b29a10fd3cd40a800f9fb4466f32cd02cae4f88d892e39a878160ec6720a2fbcfc162a71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a43d459a9e42b8bc68d0b6a7d3500512
SHA1 ae1e7eff7ab5843c7d0e216bb28baeca2ba4725e
SHA256 84444e0ea3e09375f5b19dceaaf8e70b1584aba9e2b9c899cf2e7c576a70f87e
SHA512 c29ba5f86d6938ba212221981157e43ded56d59706033a683eb3b220eda6dcd489e5c4564037aad924d08e59745ed933e4c47b6e5621d269a9907f50f5845444

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c3bdeca3178a7306e8c7834fd2d00fb7
SHA1 1b9f9c5980b401f69fd6c269759b17e3574693af
SHA256 3f96ec30ba5ef50aeeafa122fec02b2ce11071989c641f697d1a471e75983385
SHA512 8885da8700eead1bab194d270b6ed78d1add84d4dcc25cd87c727de19eca631156e8316b1d4425d889d2838ee6a0d50cef572498fc78b93054f982afab83f4b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 45f461778d893792d221ea7406c8ad27
SHA1 f9c0a378b4390256a1b7076af9b802015a2f2139
SHA256 e8e8f81f7edfa862b153b03732df0359b2aa3c4e0b653e4ac7bf1a8f94ff76da
SHA512 51e0be79f4b66d5c9d260914a3e93176091588a36fe06b8450d4902390734fd40da00943cce43bf598b8bdaa45ce99f88f12b0218042496552a84ebe31200b37

C:\Users\Admin\AppData\Local\Temp\tmp80wn7_up.sqlite

MD5 32059a8aab095c14f45f10a5439fbe98
SHA1 33fdd17cbd9fb1b9b0036ab5ab6ff20275b20758
SHA256 2ecfb901ebc7b837edb99edf8c1ff006614d4b3cb08fd036f4f22a45c6d379f2
SHA512 7d39ced40edb3a5671cf9f305e7ee1da2a8a1d759f3a6fa7e75b99ab4e309ca87275e02e9e370165a1baa85148bbb5cb8f33b12c4d8c5c9b1ab8a124ed492211

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d9e1ce4b19a4bea0b3ce78addc60bf68
SHA1 1056c6c40455449025d7dc083d09d0f54e1f5cdd
SHA256 52b3be4d8b79d4e1351d266aa8008500ba7113030c1696355821b867127275ef
SHA512 8e70bf7a1ba9e0b3f796fb1768f64a9bbc22e39c446798b15f33309c1736a8a22e6e15d6ca797d8c4e7763b77bba1c9bc98949875f5848d9364a8f59027b4337

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cba8d6c08d8855b8c305f2fb0490e6c3
SHA1 083ff645f5a43a3d257540c3ed57930c64ad711e
SHA256 93e92fa1a687f0c2a1a4340e7801294956857e4066fdeccff60717b99d13a741
SHA512 fefec50cdb6d34c713092596b6a8b72f6772fbf51220b4b8e13aee88039a1283310f3bc71332531ceb45061f8e37c9145480a4dc369476c44929fd29c8e9289d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 91c5faea04e9187775f5c16f40ba62fd
SHA1 4fb6d85cff5639f37b64ab42d57bb2c056c4218f
SHA256 276111c16d22f887f95ebe13f87053aaea60397c75d2713fa0c935f5d56ca1cc
SHA512 26228f5041d7cc179cf4f8041946342d64ad09e6abb5482a6654ec7877b888a72baed3a131ede25830eaac85748f5d30826812ccede2ee3af9ca53dd5c0c0a90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 66e774ac425a3701a2cd5ccc3065adba
SHA1 f988281fbc28d4ce92d1f58dd4b624e6d8da5741
SHA256 790ba39c536e48396df68c4e0eb8381ab7e699c3fa34057d1044e1a348bca3c5
SHA512 6aee7e7357bd4b1883cc4b5f795615c03645b4fd7b374da3c209eaa6917eebbc38a38559dbeffd69df98f405fd0ab80b46dbbdddbef762675c551814959a4d1d

C:\Users\Admin\Downloads\Synapse-X-v2.13.7-Cracked-main.zip

MD5 bdf89778572d11dc53ed9cf1aa80ca89
SHA1 e90cbdcbd9d6eca004e6bbac534c4bc1974ad929
SHA256 b8f3748ffead7ea5daa3d547e3c22873c52fc5f476a569db1515af16f84d50f8
SHA512 8adc24afd09f401eb7ce8d226e39e455ff409dd67d144ac4587495a7f1232d3c5a169a61244906ae028da922e9a85ce01fe96a65c4a3e69825ffe0f848088743

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 aeb0593ebc29c974617732f9e23bc014
SHA1 ef883f988d623d7c2739ef6cee39603dc4f3ce24
SHA256 88e9f2800e25906e20cf2836f76900bf99479cee78f6cd1633c0e970bf5778d6
SHA512 b2ac973e3296f141fb69d62ae8d6c8512e2c35ddb7fff78a8626564d80b731628c5783f54f1a9319b7fe6c801747e82c469e4d4032bc23a620606e8cf584892f