344700d3141170111a9b77db100f6961cc54a2988d964d34f7e1ca57aa42aa2a

Resubmissions

17-07-2024 10:18

240717-mb3pfawepq 8

17-07-2024 10:15

240717-macrmawekj 3

Analysis

max time kernel
738s
max time network
741s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
17-07-2024 10:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WaveInstaller Official.exe
Size

1.5MB
MD5

c822ab5332b11c9185765b157d0b6e17
SHA1

7fe909d73a24ddd87171896079cceb8b03663ad4
SHA256

344700d3141170111a9b77db100f6961cc54a2988d964d34f7e1ca57aa42aa2a
SHA512

a8612836fb4714b939d03f7fe08391bbc635ca83ab853fc677159e5db6b00f76b9b586bdae9c19d2406d9a2713d1caf614132cb6c14e1dddc6ac45e47f7e5a5d
SSDEEP

24576:9viinbT3ipyqwPx4x3RyFoBkkAd04wJAAh/jV1gJcPNZI6fntX3HOt2pbs81ind2:EinbT3ipTD0anywJAaD/3U2pb7indT

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 4 IoCs

persistence

Image File Execution Options Injection

T1546.012

Processes:

MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exe

description	ioc	process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe	MicrosoftEdgeUpdate.exe

Checks computer location settings 2 TTPs 7 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

WaveWindows.exeWaveInstaller Official.exeWaveBootstrapper.exeWaveWindows.exeBloxstrap.exeMicrosoftEdgeUpdate.exeWaveBootstrapper.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	WaveInstaller Official.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	WaveBootstrapper.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	Bloxstrap.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	WaveBootstrapper.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 33 IoCs

Processes:

WaveBootstrapper.exeWaveWindows.exenode.exeBloxstrap.exeMicrosoftEdgeWebview2Setup.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdge_X64_126.0.2592.102.exesetup.exesetup.exeMicrosoftEdgeUpdate.exeWaveBootstrapper.exeWaveWindows.exenode.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateSetup_X86_1.3.193.5.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exe

pid	process
2240	WaveBootstrapper.exe
4712	WaveWindows.exe
3468	node.exe
1220	Bloxstrap.exe
3104	MicrosoftEdgeWebview2Setup.exe
5172	MicrosoftEdgeUpdate.exe
5600	MicrosoftEdgeUpdate.exe
5612	MicrosoftEdgeUpdate.exe
6720	MicrosoftEdgeUpdateComRegisterShell64.exe
5268	MicrosoftEdgeUpdateComRegisterShell64.exe
5340	MicrosoftEdgeUpdateComRegisterShell64.exe
5380	MicrosoftEdgeUpdate.exe
6324	MicrosoftEdgeUpdate.exe
6280	MicrosoftEdgeUpdate.exe
6216	MicrosoftEdgeUpdate.exe
6348	MicrosoftEdge_X64_126.0.2592.102.exe
6992	setup.exe
6928	setup.exe
628	MicrosoftEdgeUpdate.exe
6536	WaveBootstrapper.exe
7228	WaveWindows.exe
968	node.exe
5228	MicrosoftEdgeUpdate.exe
8160	MicrosoftEdgeUpdate.exe
3296	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
7808	MicrosoftEdgeUpdate.exe
7772	MicrosoftEdgeUpdate.exe
4880	MicrosoftEdgeUpdate.exe
1436	MicrosoftEdgeUpdate.exe
6736	MicrosoftEdgeUpdateComRegisterShell64.exe
4832	MicrosoftEdgeUpdateComRegisterShell64.exe
7448	MicrosoftEdgeUpdateComRegisterShell64.exe
8096	MicrosoftEdgeUpdate.exe

Loads dropped DLL 31 IoCs

Processes:

MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exe

pid	process
5172	MicrosoftEdgeUpdate.exe
5600	MicrosoftEdgeUpdate.exe
5612	MicrosoftEdgeUpdate.exe
6720	MicrosoftEdgeUpdateComRegisterShell64.exe
5612	MicrosoftEdgeUpdate.exe
5268	MicrosoftEdgeUpdateComRegisterShell64.exe
5612	MicrosoftEdgeUpdate.exe
5340	MicrosoftEdgeUpdateComRegisterShell64.exe
5612	MicrosoftEdgeUpdate.exe
5380	MicrosoftEdgeUpdate.exe
6324	MicrosoftEdgeUpdate.exe
6280	MicrosoftEdgeUpdate.exe
6280	MicrosoftEdgeUpdate.exe
6324	MicrosoftEdgeUpdate.exe
6216	MicrosoftEdgeUpdate.exe
628	MicrosoftEdgeUpdate.exe
5228	MicrosoftEdgeUpdate.exe
8160	MicrosoftEdgeUpdate.exe
8160	MicrosoftEdgeUpdate.exe
5228	MicrosoftEdgeUpdate.exe
7808	MicrosoftEdgeUpdate.exe
7772	MicrosoftEdgeUpdate.exe
4880	MicrosoftEdgeUpdate.exe
1436	MicrosoftEdgeUpdate.exe
6736	MicrosoftEdgeUpdateComRegisterShell64.exe
1436	MicrosoftEdgeUpdate.exe
4832	MicrosoftEdgeUpdateComRegisterShell64.exe
1436	MicrosoftEdgeUpdate.exe
7448	MicrosoftEdgeUpdateComRegisterShell64.exe
1436	MicrosoftEdgeUpdate.exe
8096	MicrosoftEdgeUpdate.exe

Checks for any installed AV software in registry 1 TTPs 13 IoCs

Security Software Discovery

T1518.001

Processes:

WaveWindows.exeWaveWindows.exe

description	ioc	process
Key queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab	WaveWindows.exe
Key opened	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Software\KasperskyLab	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\Session	WaveWindows.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\Session = "Bearer 6d514927-ebf7-47b6-979a-ade0d4b43da7"	WaveWindows.exe
Key opened	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Software\KasperskyLab	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\LastUsername	WaveWindows.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\Session = "Bearer 90b4230d-23f3-40ea-afbf-b0972aac1c0d"	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\LastUsername	WaveWindows.exe
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\Session	WaveWindows.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Software\KasperskyLab	WaveWindows.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\LastUsername = "Skibidygod"	WaveWindows.exe
Key queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab	WaveWindows.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\KasperskyLab\LastUsername = "Skibidygod"	WaveWindows.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

WaveWindows.exeWaveWindows.exe

description	ioc	process
File opened (read-only)	\??\J:	WaveWindows.exe
File opened (read-only)	\??\P:	WaveWindows.exe
File opened (read-only)	\??\E:	WaveWindows.exe
File opened (read-only)	\??\L:	WaveWindows.exe
File opened (read-only)	\??\O:	WaveWindows.exe
File opened (read-only)	\??\P:	WaveWindows.exe
File opened (read-only)	\??\X:	WaveWindows.exe
File opened (read-only)	\??\B:	WaveWindows.exe
File opened (read-only)	\??\Q:	WaveWindows.exe
File opened (read-only)	\??\T:	WaveWindows.exe
File opened (read-only)	\??\Y:	WaveWindows.exe
File opened (read-only)	\??\M:	WaveWindows.exe
File opened (read-only)	\??\U:	WaveWindows.exe
File opened (read-only)	\??\H:	WaveWindows.exe
File opened (read-only)	\??\R:	WaveWindows.exe
File opened (read-only)	\??\Z:	WaveWindows.exe
File opened (read-only)	\??\L:	WaveWindows.exe
File opened (read-only)	\??\O:	WaveWindows.exe
File opened (read-only)	\??\J:	WaveWindows.exe
File opened (read-only)	\??\K:	WaveWindows.exe
File opened (read-only)	\??\N:	WaveWindows.exe
File opened (read-only)	\??\Q:	WaveWindows.exe
File opened (read-only)	\??\T:	WaveWindows.exe
File opened (read-only)	\??\N:	WaveWindows.exe
File opened (read-only)	\??\G:	WaveWindows.exe
File opened (read-only)	\??\I:	WaveWindows.exe
File opened (read-only)	\??\V:	WaveWindows.exe
File opened (read-only)	\??\X:	WaveWindows.exe
File opened (read-only)	\??\B:	WaveWindows.exe
File opened (read-only)	\??\R:	WaveWindows.exe
File opened (read-only)	\??\S:	WaveWindows.exe
File opened (read-only)	\??\E:	WaveWindows.exe
File opened (read-only)	\??\K:	WaveWindows.exe
File opened (read-only)	\??\W:	WaveWindows.exe
File opened (read-only)	\??\G:	WaveWindows.exe
File opened (read-only)	\??\V:	WaveWindows.exe
File opened (read-only)	\??\A:	WaveWindows.exe
File opened (read-only)	\??\S:	WaveWindows.exe
File opened (read-only)	\??\U:	WaveWindows.exe
File opened (read-only)	\??\W:	WaveWindows.exe
File opened (read-only)	\??\M:	WaveWindows.exe
File opened (read-only)	\??\A:	WaveWindows.exe
File opened (read-only)	\??\H:	WaveWindows.exe
File opened (read-only)	\??\I:	WaveWindows.exe
File opened (read-only)	\??\Y:	WaveWindows.exe
File opened (read-only)	\??\Z:	WaveWindows.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs

Web Service

T1102

Processes:

flow	ioc
92	raw.githubusercontent.com
93	raw.githubusercontent.com
107	raw.githubusercontent.com
108	raw.githubusercontent.com
109	raw.githubusercontent.com
110	raw.githubusercontent.com

Checks system information in the registry 2 TTPs 20 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe

Drops file in System32 directory 2 IoCs

Processes:

chrome.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Drops file in Program Files directory 64 IoCs

Processes:

setup.exeMicrosoftEdgeWebview2Setup.exeMicrosoftEdgeUpdateSetup_X86_1.3.193.5.exeMicrosoftEdgeUpdate.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\mk.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\EdgeWebView.dat	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\onnxruntime.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\identity_helper.exe	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\identity_proxy\win11\identity_helper.Sparse.Internal.msix	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\psuser.dll	MicrosoftEdgeWebview2Setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\concrt140.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\hi.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\ta.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Trust Protection Lists\Mu\Other	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\identity_proxy\beta.identity_helper.exe.manifest	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Trust Protection Lists\Mu\CompatExceptions	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_ar.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\es-419.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\ms.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_it.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_sr-Cyrl-BA.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\EBWebView\x64\EmbeddedBrowserWebView.dll	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\vi.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\zh-TW.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\VisualElements\SmallLogoBeta.png	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\gu.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bn.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ml.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_mr.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\elevation_service.exe	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\as.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_ca.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_pt-PT.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_th.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\is.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\mt.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\mip_core.dll	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_vi.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_hr.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\ca.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\fr-CA.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\kk.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\dxcompiler.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\vccorlib140.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\VisualElements\LogoCanary.png	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\id.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Trust Protection Lists\Sigma\Social	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\en-GB.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Trust Protection Lists\Sigma\Advertising	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\ro.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.193.5\MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe	MicrosoftEdgeUpdate.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bn-IN.dll	MicrosoftEdgeWebview2Setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Trust Protection Lists\Sigma\Fingerprinting	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\fil.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Trust Protection Lists\Sigma\Other	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\az.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\nb.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\identity_proxy\win10\identity_helper.Sparse.Stable.msix	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ms.dll	MicrosoftEdgeWebview2Setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\pa.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\MicrosoftEdgeComRegisterShellARM64.exe	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\msedgeupdateres_en-GB.dll	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\MicrosoftEdgeUpdateSetup.exe	MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\concrt140.dll	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Locales\ml.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\Locales\ka.pak	setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_zh-CN.dll	MicrosoftEdgeWebview2Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid pid_target process target process

5032 4712 WerFault.exe WaveWindows.exe
6528 7228 WerFault.exe WaveWindows.exe

pid	pid_target	process	target process
5032	4712	WerFault.exe	WaveWindows.exe
6528	7228	WerFault.exe	WaveWindows.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

taskmgr.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 64 IoCs

Processes:

MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exechrome.exe

description	ioc	process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133656852113496168"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	MicrosoftEdgeUpdate.exe

Modifies registry class 64 IoCs

Processes:

MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VERSIONINDEPENDENTPROGID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods\ = "43"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\ = "Microsoft Edge Update Update3Web"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass.1\CLSID\ = "{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CLSID\ = "{77857D02-7A25-4B67-9266-3E122A8F39E4}"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ = "IProcessLauncher"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods\ = "41"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ = "IJobObserver2"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\ = "Microsoft Edge Update Core Class"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32\ = "{513C065E-085A-40C1-B47D-D2F56F9AA0D1}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods\ = "10"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ = "IAppVersionWeb"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\ProgID	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\ = "Google Update Policy Status Class"	MicrosoftEdgeUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ = "IApp2"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\NumMethods\ = "17"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ProgID\ = "MicrosoftEdgeUpdate.Update3COMClassService.1.0"	MicrosoftEdgeUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\LOCALSERVER32	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{513C065E-085A-40C1-B47D-D2F56F9AA0D1}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ = "IApp2"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ProxyStubClsid32\ = "{513C065E-085A-40C1-B47D-D2F56F9AA0D1}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\LocalizedString = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.193.5\\msedgeupdate.dll,-3000"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\NumMethods\ = "17"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods\ = "4"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass\ = "Microsoft Edge Update Core Class"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ = "ICredentialDialog"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.193.5\\MicrosoftEdgeUpdateOnDemand.exe\""	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ = "ServiceModule"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus"	MicrosoftEdgeUpdateComRegisterShell64.exe

Suspicious behavior: EnumeratesProcesses 41 IoCs

Processes:

chrome.exeWaveWindows.exechrome.exeMicrosoftEdgeUpdate.exeBloxstrap.exetaskmgr.exeWaveWindows.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exe

pid	process
4724	chrome.exe
4724	chrome.exe
4712	WaveWindows.exe
4712	WaveWindows.exe
4712	WaveWindows.exe
3684	chrome.exe
3684	chrome.exe
3684	chrome.exe
3684	chrome.exe
5172	MicrosoftEdgeUpdate.exe
5172	MicrosoftEdgeUpdate.exe
5172	MicrosoftEdgeUpdate.exe
5172	MicrosoftEdgeUpdate.exe
5172	MicrosoftEdgeUpdate.exe
5172	MicrosoftEdgeUpdate.exe
1220	Bloxstrap.exe
1220	Bloxstrap.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
7228	WaveWindows.exe
5228	MicrosoftEdgeUpdate.exe
5228	MicrosoftEdgeUpdate.exe
5228	MicrosoftEdgeUpdate.exe
5228	MicrosoftEdgeUpdate.exe
8160	MicrosoftEdgeUpdate.exe
8160	MicrosoftEdgeUpdate.exe
7772	MicrosoftEdgeUpdate.exe
7772	MicrosoftEdgeUpdate.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

chrome.exe

pid	process
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

WaveInstaller Official.exechrome.exe

description	pid	process
Token: SeDebugPrivilege	3340	WaveInstaller Official.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe
Token: SeCreatePagefilePrivilege	4724	chrome.exe
Token: SeShutdownPrivilege	4724	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

chrome.exeBloxstrap.exeWaveWindows.exetaskmgr.exe

pid	process
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
1220	Bloxstrap.exe
1220	Bloxstrap.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
1220	Bloxstrap.exe
4712	WaveWindows.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

chrome.exeBloxstrap.exetaskmgr.exe

pid	process
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
1220	Bloxstrap.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
4724	chrome.exe
1220	Bloxstrap.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe
4052	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

node.exe

pid process

968 node.exe

pid	process
968	node.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 4724 wrote to memory of 4548	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 4548	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3252	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3916	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3916	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe
PID 4724 wrote to memory of 3572	4724	chrome.exe	chrome.exe

C:\Users\Admin\AppData\Local\Temp\WaveInstaller Official.exe
"C:\Users\Admin\AppData\Local\Temp\WaveInstaller Official.exe"
1⤵
- Checks computer location settings
- Suspicious use of AdjustPrivilegeToken
PID:3340

C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
"C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:2240

C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
"C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe"
3⤵
- Checks computer location settings
- Executes dropped EXE
- Checks for any installed AV software in registry
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:4712

C:\Users\Admin\AppData\Local\Luau Language Server\node.exe
"C:\Users\Admin\AppData\Local\Luau Language Server\node.exe" server --process-id=4712
4⤵
- Executes dropped EXE
PID:3468

C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe
"C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe"
4⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1220

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
"C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe" /silent /install
5⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:3104

C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
6⤵
- Event Triggered Execution: Image File Execution Options Injection
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious behavior: EnumeratesProcesses
PID:5172

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
7⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5600

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
7⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5612

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
8⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6720

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
8⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5268

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
8⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5340

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7N0VEMUUyRDQtRTIwNy00MzlELUJFRjMtMjdCODQ5NkVFNzY3fSIgdXNlcmlkPSJ7ODgwMEVGQkUtQTBCQy00NkI2LUE3NjYtRTA4MzM4NzQzNENFfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxNkJGRDM2Mi0xOTQ3LTQyRkMtOTM0QS1CRUZGOURBOENENTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7aFZmRGpNZEZHNkZnS3MwTno2ZW1yWUNTZzZUUXZEUG9tb2xSYXlRWEJLND0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4Ny40MSIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjcyMzA5NDg5MTIiIGluc3RhbGxfdGltZV9tcz0iOTI2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
7⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
PID:5380

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{7ED1E2D4-E207-439D-BEF3-27B8496EE767}" /silent
7⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4712 -s 2524
4⤵
- Program crash
PID:5032

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffad7dccc40,0x7ffad7dccc4c,0x7ffad7dccc58
2⤵
PID:4548

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1828,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=1824 /prefetch:2
2⤵
PID:3252

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2172,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2244 /prefetch:3
2⤵
PID:3916

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2264,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2544 /prefetch:8
2⤵
PID:3572

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3148,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3168 /prefetch:1
2⤵
PID:704

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3272,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3256 /prefetch:1
2⤵
PID:3396

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4568,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4512 /prefetch:1
2⤵
PID:3688

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4876,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4884 /prefetch:8
2⤵
PID:1752

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4760,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4800 /prefetch:8
2⤵
PID:5040

C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe" --reenable-autoupdates --system-level
2⤵
PID:2700

C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff6f5164698,0x7ff6f51646a4,0x7ff6f51646b0
3⤵
PID:4792

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1176,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=860 /prefetch:8
2⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:3684

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4432,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5048 /prefetch:1
2⤵
PID:6000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3160,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4704 /prefetch:1
2⤵
PID:7376

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3528,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3380 /prefetch:1
2⤵
PID:7468

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3428,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4948 /prefetch:1
2⤵
PID:8188

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5440,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5424 /prefetch:1
2⤵
PID:784

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5416,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5400 /prefetch:1
2⤵
PID:2432

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5696,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5444 /prefetch:1
2⤵
PID:8152

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5740,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=1120 /prefetch:1
2⤵
PID:8080

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5760,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5892 /prefetch:1
2⤵
PID:3232

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5788,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6036 /prefetch:1
2⤵
PID:8056

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5752,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6156 /prefetch:1
2⤵
PID:8048

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6012,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6288 /prefetch:1
2⤵
PID:8000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6564,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6576 /prefetch:1
2⤵
PID:7968

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6712,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6600 /prefetch:1
2⤵
PID:7768

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6924,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6928 /prefetch:1
2⤵
PID:3520

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6940,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6016 /prefetch:1
2⤵
PID:1780

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6172,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7100 /prefetch:1
2⤵
PID:3760

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6852,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7324 /prefetch:1
2⤵
PID:4612

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7488,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7496 /prefetch:1
2⤵
PID:5720

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7516,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7620 /prefetch:1
2⤵
PID:5644

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7204,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7756 /prefetch:1
2⤵
PID:5884

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7928,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7900 /prefetch:1
2⤵
PID:3140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7912,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7944 /prefetch:1
2⤵
PID:3156

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7332,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8100 /prefetch:1
2⤵
PID:5204

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=8392,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8396 /prefetch:1
2⤵
PID:5912

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8552,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8360 /prefetch:1
2⤵
PID:2744

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=8660,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8668 /prefetch:1
2⤵
PID:4012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=8228,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8836 /prefetch:1
2⤵
PID:2484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7788,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8948 /prefetch:1
2⤵
PID:6084

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=9112,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9108 /prefetch:1
2⤵
PID:5860

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=9140,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9116 /prefetch:1
2⤵
PID:5088

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=9256,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9396 /prefetch:1
2⤵
PID:3736

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=8968,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9404 /prefetch:1
2⤵
PID:2200

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9552,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9588 /prefetch:1
2⤵
PID:6444

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=9564,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9708 /prefetch:1
2⤵
PID:5772

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=9824,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9836 /prefetch:1
2⤵
PID:5788

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=10152,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9444 /prefetch:1
2⤵
PID:6588

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=10160,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10300 /prefetch:1
2⤵
PID:6712

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=10436,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10472 /prefetch:1
2⤵
PID:1328

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=10328,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8412 /prefetch:1
2⤵
PID:5532

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=8988,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9124 /prefetch:1
2⤵
PID:1956

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=7984,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8972 /prefetch:1
2⤵
PID:632

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=9220,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7164 /prefetch:1
2⤵
PID:1420

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=9056,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9588 /prefetch:1
2⤵
PID:5020

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=7192,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9176 /prefetch:1
2⤵
PID:948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=9180,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9740 /prefetch:1
2⤵
PID:4864

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=10116,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=11096 /prefetch:1
2⤵
PID:7400

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=11064,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9248 /prefetch:1
2⤵
PID:7512

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=4808,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8820 /prefetch:1
2⤵
PID:7684

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=7548,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7568 /prefetch:1
2⤵
PID:5924

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=8016,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8236 /prefetch:1
2⤵
PID:7968

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=8040,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7972 /prefetch:1
2⤵
PID:5952

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=5612,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5644 /prefetch:1
2⤵
PID:6248

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=8412,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6540 /prefetch:1
2⤵
PID:6240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=10360,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10428 /prefetch:1
2⤵
PID:5060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=10304,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6360 /prefetch:1
2⤵
PID:7364

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=6340,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10424 /prefetch:1
2⤵
PID:7600

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=6328,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6300 /prefetch:1
2⤵
PID:7476

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=6316,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6232 /prefetch:1
2⤵
PID:7616

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=10344,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6220 /prefetch:1
2⤵
PID:2980

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=7144,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6896 /prefetch:1
2⤵
PID:7472

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=7500,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7004 /prefetch:1
2⤵
PID:7432

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=5292,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5360 /prefetch:1
2⤵
PID:760

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=6336,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6324 /prefetch:1
2⤵
PID:7156

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=6892,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5996 /prefetch:1
2⤵
PID:1296

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=6876,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9556 /prefetch:1
2⤵
PID:7676

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=10156,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8164 /prefetch:1
2⤵
PID:1456

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=5748,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5816 /prefetch:1
2⤵
PID:5844

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=10700,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8116 /prefetch:1
2⤵
PID:5272

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=10396,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10392 /prefetch:1
2⤵
PID:8028

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=7528,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10300 /prefetch:1
2⤵
PID:3948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=9832,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6036 /prefetch:1
2⤵
PID:8108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=10468,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6208 /prefetch:1
2⤵
PID:2212

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=7052,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10536 /prefetch:1
2⤵
PID:7512

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=6988,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7992 /prefetch:1
2⤵
PID:5884

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=9316,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8020 /prefetch:1
2⤵
PID:5204

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=7024,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5800 /prefetch:1
2⤵
PID:1644

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=9352,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6200 /prefetch:1
2⤵
PID:3484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=9648,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5584 /prefetch:1
2⤵
PID:1240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=8940,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9896 /prefetch:1
2⤵
PID:7060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=8536,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6880 /prefetch:1
2⤵
PID:7372

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=9916,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9428 /prefetch:1
2⤵
PID:5096

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=10092,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10216 /prefetch:1
2⤵
PID:8104

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=5448,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9624 /prefetch:1
2⤵
PID:6756

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=3400,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8364 /prefetch:1
2⤵
PID:6484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=5432,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8908 /prefetch:1
2⤵
PID:4000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=4528,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5020 /prefetch:1
2⤵
PID:7516

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=8876,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5768 /prefetch:1
2⤵
PID:7444

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=6496,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5724 /prefetch:1
2⤵
PID:7728

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=6856,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8852 /prefetch:1
2⤵
PID:1964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=6484,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6364 /prefetch:1
2⤵
PID:8156

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=3356,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8424 /prefetch:1
2⤵
PID:8084

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=8904,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6524 /prefetch:1
2⤵
PID:8108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=9592,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6432 /prefetch:1
2⤵
PID:3036

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=5784,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6240 /prefetch:1
2⤵
PID:3736

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=4788,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4588 /prefetch:1
2⤵
PID:6140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=7028,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6980 /prefetch:1
2⤵
PID:7964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=9864,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7848 /prefetch:1
2⤵
PID:4508

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=6412,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10444 /prefetch:1
2⤵
PID:4340

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=10352,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9288 /prefetch:1
2⤵
PID:3756

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=4652,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8680 /prefetch:1
2⤵
PID:1420

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=4676,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4616 /prefetch:1
2⤵
PID:7932

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=8852,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5456 /prefetch:1
2⤵
PID:6104

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=9304,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8220 /prefetch:1
2⤵
PID:5140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=7224,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=11172 /prefetch:1
2⤵
PID:3512

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=10200,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=10512 /prefetch:1
2⤵
PID:6944

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=10416,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=6844 /prefetch:1
2⤵
PID:5236

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=8236,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8672 /prefetch:1
2⤵
PID:7776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=10472,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9148 /prefetch:1
2⤵
PID:3160

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=9040,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=11104 /prefetch:1
2⤵
PID:7132

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=3464,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=11236 /prefetch:1
2⤵
PID:7724

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=5044,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5016 /prefetch:1
2⤵
PID:7468

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=5224,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4960 /prefetch:1
2⤵
PID:6276

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=4800,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9064 /prefetch:1
2⤵
PID:5584

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=5280,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7068 /prefetch:1
2⤵
PID:7672

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=5028,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5916 /prefetch:1
2⤵
PID:7240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=5588,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8408 /prefetch:1
2⤵
PID:8052

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=4444,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9600 /prefetch:1
2⤵
PID:7072

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=5408,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5524 /prefetch:8
2⤵
PID:5080

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10132,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5548 /prefetch:8
2⤵
PID:8084

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=7428,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=7416 /prefetch:1
2⤵
PID:7348

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=5472,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=9976 /prefetch:1
2⤵
PID:2332

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=5544,i,2884739125518883484,17905985951881200889,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=8620 /prefetch:1
2⤵
PID:8128

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:1108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1564

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Modifies data under HKEY_USERS
PID:6280

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7N0VEMUUyRDQtRTIwNy00MzlELUJFRjMtMjdCODQ5NkVFNzY3fSIgdXNlcmlkPSJ7ODgwMEVGQkUtQTBCQy00NkI2LUE3NjYtRTA4MzM4NzQzNENFfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1MDUzRUJENi0wOTBFLTREQjgtODk3Qy0xQzBFMzIyQjBBMjF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7aFZmRGpNZEZHNkZnS3MwTno2ZW1yWUNTZzZUUXZEUG9tb2xSYXlRWEJLND0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTIzLjAuNjMxMi4xMDYiIG5leHR2ZXJzaW9uPSIxMjMuMC42MzEyLjEwNiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjcyMzU4NDg4MTAiLz48L2FwcD48L3JlcXVlc3Q-
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
PID:6216

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\MicrosoftEdge_X64_126.0.2592.102.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\MicrosoftEdge_X64_126.0.2592.102.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
2⤵
- Executes dropped EXE
PID:6348

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\EDGEMITMP_19AE3.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\EDGEMITMP_19AE3.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\MicrosoftEdge_X64_126.0.2592.102.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
3⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:6992

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\EDGEMITMP_19AE3.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\EDGEMITMP_19AE3.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.127 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{79B3C7C7-D0ED-4545-8FF2-03906E1D9FA9}\EDGEMITMP_19AE3.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.102 --initial-client-data=0x22c,0x230,0x234,0x208,0x238,0x7ff7a6cfaa40,0x7ff7a6cfaa4c,0x7ff7a6cfaa58
4⤵
- Executes dropped EXE
PID:6928

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7N0VEMUUyRDQtRTIwNy00MzlELUJFRjMtMjdCODQ5NkVFNzY3fSIgdXNlcmlkPSJ7ODgwMEVGQkUtQTBCQy00NkI2LUE3NjYtRTA4MzM4NzQzNENFfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0QUFCRTRDNS1BOUJGLTRBMkEtODdFNi1GRTc3ODkwMzE5ODZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4MDAyMjE4NjgyIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iOTE3IiBkb3dubG9hZF90aW1lX21zPSIyNDk1OSIgZG93bmxvYWRlZD0iMTczMDg1NzY4IiB0b3RhbD0iMTczMDg1NzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0ODQyNyIvPjwvYXBwPjwvcmVxdWVzdD4
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
PID:628

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x504 0x4a0
1⤵
PID:932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4712 -ip 4712
1⤵
PID:840

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4052

C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
"C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
PID:6536

C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
"C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
- Checks for any installed AV software in registry
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
PID:7228

C:\Users\Admin\AppData\Local\Luau Language Server\node.exe
"C:\Users\Admin\AppData\Local\Luau Language Server\node.exe" server --process-id=7228
3⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7228 -s 5748
3⤵
- Program crash
PID:6528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 7228 -ip 7228
1⤵
PID:7932

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious behavior: EnumeratesProcesses
PID:5228

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in Program Files directory
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
PID:8160

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{92141531-EA14-4D8C-AD1B-10EE2E649F0B}\MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{92141531-EA14-4D8C-AD1B-10EE2E649F0B}\MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe" /update /sessionid "{E6D55DF7-E17C-4CAF-B7F1-A961961734DE}"
2⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:3296

C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU147.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{E6D55DF7-E17C-4CAF-B7F1-A961961734DE}"
3⤵
- Event Triggered Execution: Image File Execution Options Injection
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious behavior: EnumeratesProcesses
PID:7772

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4880

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1436

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6736

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4832

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:7448

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTMuNSIgc2hlbGxfdmVyc2lvbj0iMS4zLjE3MS4zOSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntFNkQ1NURGNy1FMTdDLTRDQUYtQjdGMS1BOTYxOTYxNzM0REV9IiB1c2VyaWQ9Ins4ODAwRUZCRS1BMEJDLTQ2QjYtQTc2Ni1FMDgzMzg3NDM0Q0V9IiBpbnN0YWxsc291cmNlPSJzZWxmdXBkYXRlIiByZXF1ZXN0aWQ9IntCREVGN0RDMS05N0I4LTQzMzYtQkUyQy01QjRDNDEzRjEwRDR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xOTMuNSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjciIGluc3RhbGxkYXRldGltZT0iMTcyMDU1ODk1MyI-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTA5NTMxNTk0NDYiLz48L2FwcD48L3JlcXVlc3Q-
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
PID:8096

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTZENTVERjctRTE3Qy00Q0FGLUI3RjEtQTk2MTk2MTczNERFfSIgdXNlcmlkPSJ7ODgwMEVGQkUtQTBCQy00NkI2LUE3NjYtRTA4MzM4NzQzNENFfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntBQTc3MEEzNS0zMDQ4LTQwREYtQTNFOC1DRDk4Rjc3QzQzNTV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xOTMuNSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJJc09uSW50ZXJ2YWxDb21tYW5kc0FsbG93ZWQ9LXRhcmdldF9kZXY7UHJvZHVjdHNUb1JlZ2lzdGVyPSU3QjFGQUI4Q0ZFLTk4NjAtNDE1Qy1BNkNBLUFBN0QxMjAyMTk0MCU3RCIgaW5zdGFsbGFnZT0iNyI-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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTI5NTcxMTkzIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9hZjZiNzE1NC1jNjI3LTRlMjMtODU0MS1kZTQ0OWQ1ZDg2NWI_UDE9MTcyMTgxNjg1NSZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1kRzFFbjVXQ2lHSFN6TCUyYlB5RXZIU0NGTmtaVWxBSFZyVWNBa2NDZThIVUZ0cWw0WWRJWFg0eTJibnBxT0poZnl6NjhtMDVFZlNvM2hGdkVNdG96ODFRJTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTY0NTAxNiIgdG90YWw9IjE2NDUwMTYiIGRvd25sb2FkX3RpbWVfbXM9IjU1MDEzIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTI5Njk4NTMwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTM0OTYyODk4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PHBpbmcgcj0iOCIgcmQ9IjYzOTkiIHBpbmdfZnJlc2huZXNzPSJ7ODM3MUE1ODYtREIxOS00MkJCLTk5NEEtQ0QxOEEwREY5NTMzfSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5Mi4wLjkwMi42NyIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBpbnN0YWxsYWdlPSI3IiBsYXN0X2xhdW5jaF90aW1lPSIxMzM2NTAxMTExNjcwNzM5ODAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iOCIgYWQ9Ii0xIiByZD0iNjM5OSIgcGluZ19mcmVzaG5lc3M9IntBN0Q1RUUzNC0yNURFLTQ3MjUtQTY5Ri05OTUwQkQyMTcyNTN9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNi4wLjI1OTIuMTAyIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGU9IjY0MDUiPjx1cGRhdGVjaGVjay8-PHBpbmcgcj0iLTEiIHJkPSItMSIgcGluZ19mcmVzaG5lc3M9IntFNUM2NjlCRC1BQjFDLTRDNjItOTE2OS04MjQ3ODEzQURCQ0R9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
PID:7808

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Software Discovery

T1518

Security Software Discovery

T1518.001

Peripheral Device Discovery

T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

T1102

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.102\Installer\setup.exe
Filesize
6.5MB

MD5
de9e8cc61a43178e6fa2b36fc7a2f7e8

SHA1
ac49c0bf145d8c6e9fb98c13248fc513d2612863

SHA256
5b9c0d35e3a6d506a6521cb8042337e0a11737e376ea5ca5c7617acaf4cbaa3a

SHA512
d4fb781a8596d707043069b5b6814c929eb93937774b1becd9e37dbc2b29f99682819b40361815df599999ac6a66428fff979e4d0fa4b2cd932a778dab9eb4a2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.193.5\MicrosoftEdgeUpdateSetup_X86_1.3.193.5.exe
Filesize
1.6MB

MD5
7ef54d1691339d91a31309ee9463cb23

SHA1
88cbf2a6736d1d645dead3c16d103c4181ff19ee

SHA256
c3f6687b55ca40130067d38af5488695a1987f622cdb9647ff8fe9a2fd1a61f0

SHA512
9e3ed35289b6ad71e8c824e68d8983b91dbd298853b70e48087a4bbeadfe2f4b4cf808d7204071e39982676f25c241665ff1add67883592b44e9f4dca7b41332

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\EdgeUpdate.dat
Filesize
12KB

MD5
369bbc37cff290adb8963dc5e518b9b8

SHA1
de0ef569f7ef55032e4b18d3a03542cc2bbac191

SHA256
3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3

SHA512
4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeComRegisterShellARM64.exe
Filesize
179KB

MD5
7a160c6016922713345454265807f08d

SHA1
e36ee184edd449252eb2dfd3016d5b0d2edad3c6

SHA256
35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9

SHA512
c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeUpdate.exe
Filesize
201KB

MD5
4dc57ab56e37cd05e81f0d8aaafc5179

SHA1
494a90728d7680f979b0ad87f09b5b58f16d1cd5

SHA256
87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718

SHA512
320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
Filesize
212KB

MD5
60dba9b06b56e58f5aea1a4149c743d2

SHA1
a7e456acf64dd99ca30259cf45b88cf2515a69b3

SHA256
4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112

SHA512
e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\MicrosoftEdgeUpdateCore.exe
Filesize
257KB

MD5
c044dcfa4d518df8fc9d4a161d49cece

SHA1
91bd4e933b22c010454fd6d3e3b042ab6e8b2149

SHA256
9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2

SHA512
f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\NOTICE.TXT
Filesize
4KB

MD5
6dd5bf0743f2366a0bdd37e302783bcd

SHA1
e5ff6e044c40c02b1fc78304804fe1f993fed2e6

SHA256
91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5

SHA512
f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdate.dll
Filesize
2.0MB

MD5
965b3af7886e7bf6584488658c050ca2

SHA1
72daabdde7cd500c483d0eeecb1bd19708f8e4a5

SHA256
d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19

SHA512
1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_af.dll
Filesize
28KB

MD5
567aec2d42d02675eb515bbd852be7db

SHA1
66079ae8ac619ff34e3ddb5fb0823b1790ba7b37

SHA256
a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c

SHA512
3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_am.dll
Filesize
24KB

MD5
f6c1324070b6c4e2a8f8921652bfbdfa

SHA1
988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf

SHA256
986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717

SHA512
63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ar.dll
Filesize
26KB

MD5
570efe7aa117a1f98c7a682f8112cb6d

SHA1
536e7c49e24e9aa068a021a8f258e3e4e69fa64f

SHA256
e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01

SHA512
5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_as.dll
Filesize
28KB

MD5
a8d3210e34bf6f63a35590245c16bc1b

SHA1
f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693

SHA256
3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766

SHA512
6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_az.dll
Filesize
29KB

MD5
7937c407ebe21170daf0975779f1aa49

SHA1
4c2a40e76209abd2492dfaaf65ef24de72291346

SHA256
5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9

SHA512
8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bg.dll
Filesize
29KB

MD5
8375b1b756b2a74a12def575351e6bbd

SHA1
802ec096425dc1cab723d4cf2fd1a868315d3727

SHA256
a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105

SHA512
aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bn-IN.dll
Filesize
29KB

MD5
a94cf5e8b1708a43393263a33e739edd

SHA1
1068868bdc271a52aaae6f749028ed3170b09cce

SHA256
5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c

SHA512
920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bn.dll
Filesize
29KB

MD5
7dc58c4e27eaf84ae9984cff2cc16235

SHA1
3f53499ddc487658932a8c2bcf562ba32afd3bda

SHA256
e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98

SHA512
bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_bs.dll
Filesize
28KB

MD5
e338dccaa43962697db9f67e0265a3fc

SHA1
4c6c327efc12d21c4299df7b97bf2c45840e0d83

SHA256
99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04

SHA512
e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
Filesize
29KB

MD5
2929e8d496d95739f207b9f59b13f925

SHA1
7c1c574194d9e31ca91e2a21a5c671e5e95c734c

SHA256
2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df

SHA512
ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ca.dll
Filesize
30KB

MD5
39551d8d284c108a17dc5f74a7084bb5

SHA1
6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884

SHA256
8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07

SHA512
6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_cs.dll
Filesize
28KB

MD5
16c84ad1222284f40968a851f541d6bb

SHA1
bc26d50e15ccaed6a5fbe801943117269b3b8e6b

SHA256
e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b

SHA512
d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_cy.dll
Filesize
28KB

MD5
34d991980016595b803d212dc356d765

SHA1
e3a35df6488c3463c2a7adf89029e1dd8308f816

SHA256
252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e

SHA512
8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_da.dll
Filesize
28KB

MD5
d34380d302b16eab40d5b63cfb4ed0fe

SHA1
1d3047119e353a55dc215666f2b7b69f0ede775b

SHA256
fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f

SHA512
45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_de.dll
Filesize
30KB

MD5
aab01f0d7bdc51b190f27ce58701c1da

SHA1
1a21aabab0875651efd974100a81cda52c462997

SHA256
061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c

SHA512
5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_el.dll
Filesize
30KB

MD5
ac275b6e825c3bd87d96b52eac36c0f6

SHA1
29e537d81f5d997285b62cd2efea088c3284d18f

SHA256
223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0

SHA512
bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_en-GB.dll
Filesize
27KB

MD5
d749e093f263244d276b6ffcf4ef4b42

SHA1
69f024c769632cdbb019943552bac5281d4cbe05

SHA256
fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e

SHA512
48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_en.dll
Filesize
27KB

MD5
4a1e3cf488e998ef4d22ac25ccc520a5

SHA1
dc568a6e3c9465474ef0d761581c733b3371b1cd

SHA256
9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011

SHA512
ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_es-419.dll
Filesize
29KB

MD5
28fefc59008ef0325682a0611f8dba70

SHA1
f528803c731c11d8d92c5660cb4125c26bb75265

SHA256
55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d

SHA512
2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_es.dll
Filesize
28KB

MD5
9db7f66f9dc417ebba021bc45af5d34b

SHA1
6815318b05019f521d65f6046cf340ad88e40971

SHA256
e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819

SHA512
943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_et.dll
Filesize
28KB

MD5
b78cba3088ecdc571412955742ea560b

SHA1
bc04cf9014cec5b9f240235b5ff0f29dbdb22926

SHA256
f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085

SHA512
04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_eu.dll
Filesize
28KB

MD5
a7e1f4f482522a647311735699bec186

SHA1
3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd

SHA256
e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4

SHA512
22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_fa.dll
Filesize
27KB

MD5
cbe3454843ce2f36201460e316af1404

SHA1
0883394c28cb60be8276cb690496318fcabea424

SHA256
c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59

SHA512
f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_fi.dll
Filesize
28KB

MD5
d45f2d476ed78fa3e30f16e11c1c61ea

SHA1
8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e

SHA256
acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2

SHA512
2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_fil.dll
Filesize
29KB

MD5
7c66526dc65de144f3444556c3dba7b8

SHA1
6721a1f45ac779e82eecc9a584bcf4bcee365940

SHA256
e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d

SHA512
dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_fr-CA.dll
Filesize
30KB

MD5
b534e068001e8729faf212ad3c0da16c

SHA1
999fa33c5ea856d305cc359c18ea8e994a83f7a9

SHA256
445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511

SHA512
e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_fr.dll
Filesize
30KB

MD5
64c47a66830992f0bdfd05036a290498

SHA1
88b1b8faa511ee9f4a0e944a0289db48a8680640

SHA256
a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961

SHA512
426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_ga.dll
Filesize
28KB

MD5
3b8a5301c4cf21b439953c97bd3c441c

SHA1
8a7b48bb3d75279de5f5eb88b5a83437c9a2014a

SHA256
abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0

SHA512
068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_gd.dll
Filesize
30KB

MD5
c90f33303c5bd706776e90c12aefabee

SHA1
1965550fe34b68ea37a24c8708eef1a0d561fb11

SHA256
e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c

SHA512
b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_gl.dll
Filesize
28KB

MD5
84a1cea9a31be831155aa1e12518e446

SHA1
670f4edd4dc8df97af8925f56241375757afb3da

SHA256
e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57

SHA512
5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_gu.dll
Filesize
28KB

MD5
f9646357cf6ce93d7ba9cfb3fa362928

SHA1
a072cc350ea8ea6d8a01af335691057132b04025

SHA256
838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150

SHA512
654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_hi.dll
Filesize
28KB

MD5
34cbaeb5ec7984362a3dabe5c14a08ec

SHA1
d88ec7ac1997b7355e81226444ec4740b69670d7

SHA256
024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9

SHA512
008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_hr.dll
Filesize
29KB

MD5
0b475965c311203bf3a592be2f5d5e00

SHA1
b5ff1957c0903a93737666dee0920b1043ddaf70

SHA256
65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0

SHA512
bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

Download Submit
C:\Program Files (x86)\Microsoft\Temp\EU531E.tmp\msedgeupdateres_hu.dll
Filesize
29KB

MD5
f4976c580ba37fc9079693ebf5234fea

SHA1
7326d2aa8f6109084728323d44a7fb975fc1ed3f

SHA256
b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791

SHA512
e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

Download Submit
C:\Program Files\MsEdgeCrashpad\settings.dat
Filesize
280B

MD5
fae46bcbba30256845f33c66859c386e

SHA1
8d4db4f57a8aafc419e9e0414a598269d310b418

SHA256
70827e673d2db7d0299d1c30ba66f66a8155e5b2c474631195980926e0e49770

SHA512
6077c16cd1ef125e3c4a45b87e52337584a15da9a890002a72dce24a8febb74a11ee522badcf2c157c5e71d16e1ef983ede9e970df1d318f746b2d5f27fdff82

Download Submit
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
Filesize
197KB

MD5
6899c34b3de6657333ebbbb4978aae30

SHA1
90ec58b3a206cf2f6de46999c4337d0626f9a54b

SHA256
61df51df666479b4d57814a635dbd68151c5988d896822acd0c469b04a632b8a

SHA512
77b92e3f5aad460ef9065f723e01efd5e9a2480230bbc0debe321febca994da1dce043a354df15390799cd0b66458795df743111bdb741c4f09b5f6d7332c513

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.dll
Filesize
4.3MB

MD5
6546ceb273f079342df5e828a60f551b

SHA1
ede41c27df51c39cd731797c340fcb8feda51ea3

SHA256
e440da74de73212d80da3f27661fcb9436d03d9e8dbbb44c9c148aaf38071ca5

SHA512
f0ea83bf836e93ff7b58582329a05ba183a25c92705fab36f576ec0c20cf687ce16a68e483698bda4215d441dec5916ffbdfa1763fb357e14ab5e0f1ffcaf824

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe
Filesize
249KB

MD5
772c9fecbd0397f6cfb3d866cf3a5d7d

SHA1
6de3355d866d0627a756d0d4e29318e67650dacf

SHA256
2f88ea7e1183d320fb2b7483de2e860da13dc0c0caaf58f41a888528d78c809f

SHA512
82048bd6e50d38a863379a623b8cfda2d1553d8141923acf13f990c7245c833082523633eaa830362a12bfff300da61b3d8b3cccbe038ce2375fdfbd20dbca31

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.runtimeconfig.json
Filesize
372B

MD5
d94cf983fba9ab1bb8a6cb3ad4a48f50

SHA1
04855d8b7a76b7ec74633043ef9986d4500ca63c

SHA256
1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a

SHA512
09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Modifications\ClientSettings\ClientAppSettings.json
Filesize
120B

MD5
636492f4af87f25c20bd34a731007d86

SHA1
22a5c237a739ab0df4ff87c9e3d79dbe0c89b56a

SHA256
22a1e85723295eeb854345be57f7d6fb56f02b232a95d69405bf9d9e67a0fa0d

SHA512
cd2e3a738f535eb1a119bd4c319555899bcd4ce1049d7f8591a1a68c26844f33c1bd1e171706533b5c36263ade5e275b55d40f5710e0210e010925969182cd0c

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png
Filesize
20KB

MD5
4f8f43c5d5c2895640ed4fdca39737d5

SHA1
fb46095bdfcab74d61e1171632c25f783ef495fa

SHA256
fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1

SHA512
7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\ExtraContent\textures\ui\LuaApp\graphic\[email protected]
Filesize
71KB

MD5
3fec0191b36b9d9448a73ff1a937a1f7

SHA1
bee7d28204245e3088689ac08da18b43eae531ba

SHA256
1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89

SHA512
a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\ExtraContent\textures\ui\LuaDiscussions\buttonFill.png
Filesize
247B

MD5
81ce54dfd6605840a1bd2f9b0b3f807d

SHA1
4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c

SHA256
0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386

SHA512
57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
Filesize
1.5MB

MD5
610b1b60dc8729bad759c92f82ee2804

SHA1
9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552

SHA256
921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08

SHA512
0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\configs\DateTimeLocaleConfigs\zh-hans.json
Filesize
2KB

MD5
fb6605abd624d1923aef5f2122b5ae58

SHA1
6e98c0a31fa39c781df33628b55568e095be7d71

SHA256
7b993133d329c46c0c437d985eead54432944d7b46db6ad6ea755505b8629d00

SHA512
97a14eda2010033265b379aa5553359293baf4988a4cdde8a40b0315e318a7b30feee7f5e14c68131e85610c00585d0c67e636999e3af9b5b2209e1a27a82223

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\configs\DateTimeLocaleConfigs\zh-tw.json
Filesize
2KB

MD5
702c9879f2289959ceaa91d3045f28aa

SHA1
775072f139acc8eafb219af355f60b2f57094276

SHA256
a92a6988175f9c1d073e4b54bf6a31f9b5d3652eebdf6a351fb5e12bda76cbd5

SHA512
815a6bef134c0db7a5926f0cf4b3f7702d71b0b2f13eca9539cd2fc5a61eea81b1884e4c4bc0b3398880589bff809ac8d5df833e7e4aeda4a1244e9a875d1e97

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\sounds\ouch.ogg
Filesize
6KB

MD5
9404c52d6f311da02d65d4320bfebb59

SHA1
0b5b5c2e7c631894953d5828fec06bdf6adba55f

SHA256
c9775e361392877d1d521d0450a5368ee92d37dc542bc5e514373c9d5003f317

SHA512
22aa1acbcdcf56f571170d9c32fd0d025c50936387203a7827dbb925f352d2bc082a8a79db61c2d1f1795ad979e93367c80205d9141b73d806ae08fa089837c4

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\Cursors\KeyboardMouse\IBeamCursor.png
Filesize
292B

MD5
464c4983fa06ad6cf235ec6793de5f83

SHA1
8afeb666c8aee7290ab587a2bfb29fc3551669e8

SHA256
99fd7f104948c6ab002d1ec69ffd6c896c91f9accc499588df0980b4346ecbed

SHA512
f805f5f38535fe487b899486c8de6cf630114964e2c3ebc2af7152a82c6f6faef681b4d936a1867b5dff6566b688b5c01105074443cc2086b3fe71f7e6e404b1

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\StudioToolbox\Clear.png
Filesize
538B

MD5
fa8eaf9266c707e151bb20281b3c0988

SHA1
3ca097ad4cd097745d33d386cc2d626ece8cb969

SHA256
8cf08bf7e50fea7b38f59f162ed956346c55a714ed8a9a8b0a1ada7e18480bc2

SHA512
e29274300eab297c6de895bb39170f73f0a4ffa2a8c3732caeeeac16e2c25fb58bb401fdd5823cc62d9c413ec6c43d7c46861d7e14d52f8d9d8ff632e29f167c

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\StudioUIEditor\valueBoxRoundedRectangle.png
Filesize
130B

MD5
521fb651c83453bf42d7432896040e5e

SHA1
8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9

SHA256
630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70

SHA512
8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\TerrainTools\checkbox_square.png
Filesize
985B

MD5
2cb16991a26dc803f43963bdc7571e3f

SHA1
12ad66a51b60eeaed199bc521800f7c763a3bc7b

SHA256
c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646

SHA512
4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\Thumbstick1.png
Filesize
641B

MD5
2cbe38df9a03133ddf11a940c09b49cd

SHA1
6fb5c191ed8ce9495c66b90aaf53662bfe199846

SHA256
0835a661199a7d8df7249e8ae925987184efcc4fb85d9efac3cc2c1495020517

SHA512
dcef5baccef9fff632456fe7bc3c4f4a403363d9103a8047a55f4bd4c413d0c5f751a2e37385fe9eba7a420dbdb77ca2ff883d47fcdd35af222191cc5bd5c7a9

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\[email protected]
Filesize
1KB

MD5
e8c88cf5c5ef7ae5ddee2d0e8376b32f

SHA1
77f2a5b11436d247d1acc3bac8edffc99c496839

SHA256
9607af14604a8e8eb1dec45d3eeca01fed33140c0ccc3e6ef8ca4a1f6219b5dd

SHA512
32f5a1e907705346a56fbddfe0d8841d05415ff7abe28ae9281ba46fedf8270b982be0090b72e2e32de0ce36e21934f80eaf508fd010f7ab132d39f5305fb68f

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\[email protected]
Filesize
1KB

MD5
499333dae156bb4c9e9309a4842be4c8

SHA1
d18c4c36bdb297208589dc93715560acaf761c3a

SHA256
d35a74469f1436f114c27c730a5ec0793073bcf098db37f10158d562a3174591

SHA512
91c64173d2cdabc045c70e0538d45e1022cc74ec04989565b85f0f26fe3e788b700a0956a07a8c91d34c06fc1b7fad43bbdbb41b0c6f15b9881c3e46def8103e

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\Thumbstick2.png
Filesize
738B

MD5
a402aacac8be906bcc07d50669d32061

SHA1
9d75c1afbe9fc482983978cae4c553aa32625640

SHA256
62a313b6cc9ffe7dd86bc9c4fcd7b8e8d1f14a15cdf41a53fb69af4ae3416102

SHA512
d11567bcaad8bbd9e2b9f497c3215102c7e7546caf425e93791502d3d2b3f78dec13609796fcd6e1e7f5c7d794bac074d00a74001e7fe943d63463b483877546

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\[email protected]
Filesize
1KB

MD5
83e9b7823c0a5c4c67a603a734233dec

SHA1
2eaf04ad636bf71afdf73b004d17d366ac6d333e

SHA256
3b5e06eb1a89975def847101f700f0caa60fe0198f53e51974ef1608c6e1e067

SHA512
e8abb39a1ec340ac5c7d63137f607cd09eae0e885e4f73b84d8adad1b8f574155b92fbf2c9d3013f64ebbb6d55ead5419e7546b0f70dcde976d49e7440743b0f

Download Submit
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-3243b6d003cf4642\content\textures\ui\Controls\XboxController\[email protected]
Filesize
1KB

MD5
55b64987636b9740ab1de7debd1f0b2f

SHA1
96f67222ce7d7748ec968e95a2f6495860f9d9c9

SHA256
f4a6bb3347ee3e603ea0b2f009bfa802103bc434ae3ff1db1f2043fa8cace8fc

SHA512
73a88a278747de3fefbaabb3ff90c1c0750c8d6c17746787f17061f4eff933620407336bf9b755f4222b0943b07d8c4d01de1815d42ea65e78e0daa7072591e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\63b96611-0e79-4a47-b11f-fcdd8806fb5b.tmp
Filesize
11KB

MD5
785f14ce74e9e1f1be8698f21dc039b6

SHA1
65a2317f274da782654138781eb6743a399f3222

SHA256
138a4903891f5fbf4b5bc8ed20c391f9a145364c60f809a57f7ed38806c9b8fc

SHA512
c530448d0c6190df13002e2b0a1ac3ad2f727407d2abc3c2c68680703c99ec6e9abc76426de52d4d29ed87f38250ccfb471c41d9e6a443cc919da05631a84aa2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Filesize
649B

MD5
4b60776f9b7cc842cb6342d736aa4115

SHA1
f0b824a87d0ddb5a3cc7bf61e1681662d411312a

SHA256
22885052254b6aea61da0194cdb5bbf1bbe33049396a0f5bd595e12fa212589d

SHA512
b81f3ecd81b2ba6d826ce21f18ede76d642f7c0af6ed97d9e2ee2f57f77c27a303a1de35c8dd8437e85d381048d3d603d67d4505255e1a7ad16952a4d232eb55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001
Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Filesize
71KB

MD5
f3fc51fd4fe1e884dd7b6f70b0b7c6f1

SHA1
811a35b96354d375e7e0f5214529f6e763436fae

SHA256
632d5469559b7e125caa7afa2764ff70421141550d5a1fbb652330ccc4c4e748

SHA512
00d08f4ee90a423c0bbad02dee71bc9c8b648aa9f51ad58854f1603ed6e12bc8ce8331c69630e5cee9de9be03703eaa9959e30531295bf69ce14533433b27393

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Filesize
79KB

MD5
20832efb5568343bdd630acfb7ae5506

SHA1
c3760820bf6ff5b80c14b0ccb1eaa5ac329106eb

SHA256
588af7382a7bdd617b5bbe65cff890f3efc5f8b3b154e25bcf7590cb1386eeff

SHA512
d78f9064d84f709560891c7e1536b74c1279bd2daa81f42b569180b409728c6e7160f883c6e380b463f6d2e9eb77a053d2311294f45cea0105fe15f7c4d82347

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Filesize
52KB

MD5
4efc2e66ea4a81f48739935e6c6f4cec

SHA1
96385a79cdac276f4d48b087cfda60ba47e95267

SHA256
ae8d78e7f6cddde71b9b088f1e25f399e6080b1658145349e57f741dd3df29b3

SHA512
b5e4b2ee6e9df2aa8cc93de19586d6c2d6c2c3fc8b814bf5829753c8c912f8650e7d75f09539090681e7f8c177b45358f3171bf31b9e45188522fa1777eea7e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Filesize
179KB

MD5
083c6a8668b1c641409d470122cfc017

SHA1
ed9a109e62e1e900ff70dba19dbf69aed562e5f3

SHA256
5a94c86c511f4126e07bf92e566b8c9be01660a21ae7a2aed0ee8de904f71624

SHA512
b697b9eea5872ac5501afc5d32885cd0ec003199e3b8390e81079856c80c85fecbb62cf68c70d05213aeb55f205d5f52af1b79190331cb82caa48b77de53c108

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Filesize
97KB

MD5
908668115b388a884258f6ebf4c3d512

SHA1
844a1e326981ef9b7af9e273af88932fd6fb7d2f

SHA256
e128398cbca9f21d6bfa47d9f02fa687aa371209256617a7ab82766fd0b11859

SHA512
5ffd55c66a66cf7b4ff14c6b736c18759a7ee693b748397febe4f7842aabc9f814bbd932470056caad23fd9da634d22455e8aacff5b074d9d8cc48f2bc428e59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Filesize
94KB

MD5
eea2785ada5c19001b1e9e81b7b75487

SHA1
bf0027e9c026c9132ae8d74c70799f8dda9b2ac3

SHA256
a9b9c36f63c2bc1372eb677e7d7ba7755df213a6ab2570f7d9a7f908c3e2cc2c

SHA512
4ed5e7f915e86fadadd3bc3739ca1c5960b0b2a5b610c8e37e83656d457b0d29566e303a7411a4a2dae4664748da01953128ce9e27759cd7cddbd53fca61a927

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Filesize
143KB

MD5
31fa726bb5682c5e368b66ee2ce228c8

SHA1
f736239092e6a2732cef931c4a185e0c34196836

SHA256
bb723102572f9e356f2991d9a189c44cd7f30e63fcf7a06f2676de57ccd8d23e

SHA512
7a82046fdea9f520fb381ca011eebaf6d67a11d34d9504c3ca1bcb709dd1790582fcb15b4036935492a310f7bc289699607074e69162a904e97c2d04558c63d1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Filesize
21KB

MD5
7e4b06e146f3cb1f46e8a35c9a69b567

SHA1
e5b8ae8fac7f8800d365fdb8379ca9e7d25bf6ef

SHA256
1be2ba7b6d369a3c5f5e53911cc85b82a49d7ef6fc5cbdeae8e7760f0cb5b001

SHA512
aae27ee26b09354f6263b39bb4e117cf580902a04919aa694a2205b19b69d7d341c39b5f01fefc659b40e8829d09b78fb6f2ed231500c1bfeae5aceeabab8886

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Filesize
43KB

MD5
12e4ed0037217bcfbefee69c5e08b013

SHA1
904c3f26e63866c339ac8dc206486bd8d1618045

SHA256
470191dbb134f2f6eba27f9c4e78f2a596dfde8f80c17fa6f963e0cd56cc60ac

SHA512
bcd2ffb053fa87aea47c30bd64b544291d4845cfdb222116e7939f14a20c33e6042d29a037070fcdb7a2c27ec2d869691b63e4667079b3de699ee009b97d80f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Filesize
30KB

MD5
f0eabbfff9290d658d4b2cadb99f6fc1

SHA1
f944441eb88fd7a0e30afdfe849bea7c9c3ff42c

SHA256
152ea1de464db4522b713c57e5e9bb597a7e6a62407e7c632b3b6093848d1984

SHA512
5ba5a30a64fb4d2883a805c2f846110106a40603e80668efc31db4aa1c11156d25cc69a8c83b16b963641a1c53b7b96dddfe52fa2b22769ed6a61b690991290d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Filesize
76KB

MD5
2002fa7e1711f74b95b019d5101304a4

SHA1
c3187f18c24c9fdb11e54386b530d6c7c59e15d4

SHA256
4081f8ea9b40b42c836baf7404d9b7963ad3cce83c698896e4a22b4a4c83202e

SHA512
2e40477acadeae2d5dd5b15be76b794c9e63c7ce22067f7a32cbf59fa0edf0e452dfcda8d48730a7659fc7a3b07fd5c4c46443328d2eb75261a53a20fa419029

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Filesize
145KB

MD5
83f8e665b9497f7abac60395fdc97912

SHA1
3494c844aeae3be358e420fdfb4e3fd6bbd2f983

SHA256
e0bc1ce2809bde644c23d0e453f0fafc9543351a6b195bbc0b5727433e3651e0

SHA512
960e0fecfe96f6b8758e7edbd17e158265fa238456f3497dcb6c36ddab3757c60021e967feb5edf47194292882e41ecaac1ddffa86bf42abe79eba55b7c327eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Filesize
27KB

MD5
7820201f0db0c706a0ea5bb7ce018ef2

SHA1
6d116650afbb3b25bfd6226c7d5ee00dd1fe4515

SHA256
04f262a5cce0399379de17e5635f1e1acaf4371afe981edaaf792625a682c44a

SHA512
bfecb88d8852c413525e1e1bdb3eb69c97a10e4ff67ae3ca5eb97fff5a2ee369a1b80a0d314440a375d0f9e950e0e970a6de6afed09062d8523ca28ac878946f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Filesize
16KB

MD5
89a574ff00e6b0ec61d995d059ce6e65

SHA1
aea09e96808ab77165ffa712eaa58b8f056d0bb6

SHA256
e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44

SHA512
30d0d40bd680e61968273155b740901cdfa66670fc2af6f23e44c6b998b67cc1fcd0b51bd5f9470f209f188e75d071355e592b2a7c97f4bfd15d07d455e0909d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Filesize
21KB

MD5
7551db2dfd4db802c7f556d40ced180f

SHA1
8f66b83c1df34598ce8622cd6f25170ff971b7e1

SHA256
a78c5af98ad8f4fde8b9b6297d5c4061f9e2e1ae88a5963f2efaa4fdc5ebd976

SHA512
fb21305bb4b794480ca4fbe19a7c96918871f9e77a17176af9cadb91f93ef9c79d4b9fa585906e9d0dd6ce9af052fd4904493fa3711f44b28f623d08508fd394

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Filesize
30KB

MD5
6fb26b39d8dcf2f09ef8aebb8a5ffe23

SHA1
578cac24c947a6d24bc05a6aa305756dd70e9ac3

SHA256
774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059

SHA512
c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Filesize
20KB

MD5
7f8965bc4a6541189bb000b832b3ba4b

SHA1
2cfc6a12844c3ec89d571ec5d87cdd5a0cdc26ad

SHA256
57e9504e17918efff5f382ae00f64cf1203fbc3190adc3774f43f49a883a16da

SHA512
7763d57e238ff0cf43550cada4c6d941a673e0e9ce8020e0b6b1a99af54217c7180c2354edf9138cd50461c07de5e0ad09527e3fc7ef87a73003ac3847dbf306

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Filesize
34KB

MD5
e68dc41937e75b392b26998acb2d09be

SHA1
b3ffd33f790eb21b8bae1c6c8f93c85765fc4e91

SHA256
e4b53b7fdd39514df81e6bb419cb980f00cbb8c95cd421f17cb702faf18af513

SHA512
68eb5da95eca580e9d3040ea91717300e810e26cfed80f0765c2edc2e983d102671c358792c72c680f9a621304cfa542bb116cac9f6f1dc2fa28e39201210425

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Filesize
63KB

MD5
16f6f8ae2aa57162237d4eb44a7886b4

SHA1
04d5f8f5f611bb22044b49286ca1b26275f5a7cf

SHA256
2a2e88199811f550151ecc39b0a9eb3a218ee99b64e1af23696fa120afe6ab1f

SHA512
9f53942cc3976bf5a11a5502bf688809923a7f82276089fbfd0f96fbc998998be4f424b9cdd4c9a214588f80eabb37840622cab48d8e96313eabbb395747721e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c
Filesize
19KB

MD5
1c1441e4c0ffab4ed8d316ee1f772511

SHA1
9d21edc040fc31d521619e49c005b40f8a6d526a

SHA256
db65d7520a3ba1eb104590d3b33162d3142fff76f546192ca5e1ae0775f3d33e

SHA512
cdcbd0400832af06c761ebfa1648a3f3b24cf6efa74964a41f9625dad6f650183941efb6365957e22310592d144773016a70c380437a7c25bb59dc90f14d5377

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
Filesize
24KB

MD5
c594a826934b9505d591d0f7a7df80b7

SHA1
c04b8637e686f71f3fc46a29a86346ba9b04ae18

SHA256
e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

SHA512
04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0346e514baa3eb7f_0
Filesize
275B

MD5
d47144def011b11aec54cd8131be03a9

SHA1
ea7efd20f9516f2a9ae32ccdd188669cc2c7765d

SHA256
dda8f40bd4eb8d277fcbb00c3a2d21338e03c8ba3640f45a9e23276cd91980d3

SHA512
ae2b98cf22cf39670e940cc098caffe5bebb1cba44fa27593fe3c80966fb9b27bdfd6648ddd723857b75db44fccd566bdcbc0eb469ff756d64006003ce144236

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\084d4e3e8f4a6a3a_0
Filesize
251B

MD5
4c744b68226584b229bd30940de78df7

SHA1
8ec701d4154803f0905bf61ff882da40f048082d

SHA256
3492b7586a2dc4f366b84f4ee3b9cab6567e1924efaca19bb75bc9bce81eb60b

SHA512
833b71bcc89ae293062e2e5124ff86ef205d3439f6e8b3eeece9044b733ae8be8b824415cef2c0165c40008a162d1d561723d24704ab309e3fec794fd77c2ac0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e4a4370143d83d1_0
Filesize
317B

MD5
e3b13e72cffc481dbc3d558deaee75e3

SHA1
adc06f9db3fc4e3e2aa88bb9af0b3041098c2f15

SHA256
3566d4e34eb30f71f2fee9cc2e57ba04882bf08078af7654d26c63d76f341c18

SHA512
15820211f6ec90cc78c330cfc05b86e1aa38140a311fd9605926ec96408d36e91a2fbe7461dd277b4af7ff54a49d5a3e69c1670edc05f066a4e690162a767434

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10c16a6b6b5dbbc8_0
Filesize
173KB

MD5
5cbf5796e62ad24b83ee673181e9db57

SHA1
4219ea7651cbd8b574822c1c0dd494b3044ed8f1

SHA256
f74de87475c3a2e5a232c4a2515c8e6a033ae60aa9f670566959db471fd982f6

SHA512
8ba26a265980b12b09e3d43ec2ac803e99667e404c0069f5534f8929c16bbff03ed815c7287111b2a59735129f5376ae28bb62fac10166b3469b8bc32f5f21ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0
Filesize
252B

MD5
272acbb74d38ee8ef9d045fc2b98deea

SHA1
bfef36db202fff78ab780b551b0444a04a726c05

SHA256
91bac438b31c07dc54cabbcd5f7b89f0e1a2a50786d638c577fd7b46f157c146

SHA512
c93eae06f5a903d4b35750e595bad34d506975af223c5f7bf99164480500bc282476de41c662f148f27c37ec14b59433566feb483e112db0b6d0d3ea3b806fc5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\29154bfd3957dfd1_0
Filesize
271B

MD5
c6c5cb391f25cf01569a314195ab4d2e

SHA1
dbcdacd6bd898cce72302149258d0ea0ba27c163

SHA256
6f38605deab931a1ff588a21eb6e0f5a9eec7018a67a0181672a70a8fc4b1e05

SHA512
478d5d9171ebfa169400058632d812671bffedd208eade6096a246d9026993a571a2936c2c276e3d2be381bd3d5c9d06d3cdba30bd020a9f8cf682e55da93205

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Filesize
309B

MD5
c254659eef8882f83e5ce28ac79353ef

SHA1
f64d2f5ec992435dc5858d8f667e61fc0ea44176

SHA256
b95da0cfb6d9e054128e9237c1201c1b64bacda4f19be20aa3f171363459b8cc

SHA512
b4fb801398a74f716e51159a94a826a2fa66dd3bc33e368fbaa679334f69003dcdc4e94942eca388f6a1aefc5e4a5f84f69cf3994106eafc5e276a54d4792679

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3a64c10be9555ab8_0
Filesize
45KB

MD5
5bd8852c462910d127971673ced70f7f

SHA1
dfd2c4485260a74bdad7ed3d1b7e305ba66b5590

SHA256
1a60ccca89fcea717b2136d8a36c696abb0272d1d37d4d37dd6d9b3a57d09677

SHA512
dcbbf90db69ae1f83300066305a1b63b1cf6d408a6078f3e9267da33ca9f621ff9df876651b12c01008b07325b274f88cd8a1aed3d50b0edf6d408f545d07bd5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4aeee14abbefe413_0
Filesize
9KB

MD5
210bc92e3438570b7a6392bdde5551e5

SHA1
f67d22d9e4e8638acc305d4e63324f1cde17403d

SHA256
7d8e6327afbc95b8c04ea1d0191a773821faf62eb3f760e474bf86562224a3f9

SHA512
941ed6e3be9e2b6e87f349ed5a01555f0c34d8ce00ac8a2647b5715dd85ec5b6f521c4e3c6801dcf3eacfb9a6e82385f4a7ab74158e170c91c67c6dda9c6d7cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0
Filesize
236B

MD5
267038f0c0928876f8bcb282cdf01c8c

SHA1
fefcc6311d84fdc5e38706168cf84d8ea32dd375

SHA256
68a4e96402ee7e96d2d4d7136d3c9001ac22b3864fc0512b8fe23ee1540af72d

SHA512
020d438f6574c3b129ddbdb64672c4a16b2d57c6839e8fc0fca7932c80b99d23d2165d1e4525e1b9bc54b23c9c65b7f149a471119248e382c8099460ebed4675

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0
Filesize
276B

MD5
aea91a3923b5e4cc0a82eee0dae792a2

SHA1
2a541a54d19d6f1fca7df93585ed4f264dee1121

SHA256
42f764b5250ff220fc4564225b66abb44580288193dba75d9d3522130ffad06e

SHA512
60bb170734627639453d504ede702a9338b3ff046461f1c79ca233a5e72a09c5c1d871978456bef0ccd51aaa301fefe48e1d2661d4d58b14a1b2a0c5eb5b7fce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f660ef002b76b62_0
Filesize
259B

MD5
59988576039b2b05debe8c8d6b0ac0d6

SHA1
9760007f23c3bf0fa85a4de64de193854ef63337

SHA256
241557b666cade0063bfe19d7319ccc7fcd1b2e25f305dad1531ef6cb5246313

SHA512
511350d57a117201401b8d9e63ed4f470bf21f20851f3a8a669bc88dff0c8c868cb65bff988e6bc0eed0d8c9d7ff468aac2fe13ffac5a41f2e5b4d8fb48bb550

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5986b7623b457ef6_0
Filesize
27KB

MD5
4cbf67a07fb1d77d243cf5b2492e9d4c

SHA1
c6493d114226abdb67ce188e59d5a6b2c590b37a

SHA256
f2074e92734a8a650e5fbfd8568c85d43e255b229f44bb191e96c5571c932abd

SHA512
9a08a76bd29c1e29c129c5ccab3fb7e6d11a336c36b0650c0d72a2a072d0c87f6003f837d624eb0e6a586bfec8de9a4efb24244cafcd8846862ed7c3d72ebd23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\70dcbd9e0740e351_0
Filesize
265B

MD5
e784647b611898f0e096b008332af904

SHA1
ca787db905eb027c8cbe41c36d2bec82a1359d5d

SHA256
910f4e9e9294874da922c34baa2b18b7e07786c9460157004ff86db1b4d0bb20

SHA512
ad9831551ae2cace00b3afb655b94928c5ccf021963e45dd5839c458ba23ad5c42d952f5d82474188362da8ce3e5d72c38d09a946e85e3f07feb9c6f75d08a99

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\70dcbd9e0740e351_0
Filesize
3KB

MD5
b20900031c3ab9ba95c3fe0f9db61819

SHA1
f010cf314db3018e2c85e7ab4faab3b497a8a933

SHA256
ee857b62b1f771f955263b859d3cd02688c9beff2d6a524cdd92afb13207109b

SHA512
d54a9ba5ea84b11b32edb88a3e54ad52754bb05223abe332b1c290d6a863cf7e5a34d4a5d141b0c0dfaee35586c7902471ca58450385fc42807e7c09e1645246

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\769578108cc14a90_0
Filesize
39KB

MD5
67787a0711e81268ad7b52ee0e1e2a37

SHA1
ca461cfd8a205443ea301beaafb6eb1bf2f44b06

SHA256
77874059a007bccb2c7027f56104df20d13e4feecc346c5102d9693e9c173143

SHA512
b7e16b905fc61cb7aa061dd8cc9da9cfabfff331a9a66530f75bd55924edafc8bf109864cd5255782ca99c20a321682cbdc72139413d2e5f851fa242058fd1cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\83f7ec39c2e5cc1f_0
Filesize
404KB

MD5
e072de8451f1ed0f8ccb61e817ea0ba0

SHA1
d97fb11f5166a5055c7e09cc9e342e31c09f8ac5

SHA256
826d548230790c2a05bd811b448813fd2e6494f18a1606dbcf3e7de919e24e67

SHA512
6501807fbbe55546ec4f9f8d787547413918dab6bc196dff651d227d082cb061fcd2b4e6e4fcded57e5e3535e321b33801ba6bc03273f26616c7e996d6e6c803

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8891b661ecd6fb56_0
Filesize
262B

MD5
7fb9b83a192d392c266ed23d7ca54ece

SHA1
eb6fd61923d9f0972873c9a114c62e0e6baa37ce

SHA256
ab76e50782de02424fc0da1431c40a538b2e51c18b2f642c56d882d21889632b

SHA512
c7614ea5e0eff57b66dcb8b38cfda27ce134bc5897b97dc81c07144af64254bdccbc7d2c86d78bb099a28ad08f7c55731bf434e28da47a821593f214fecf11c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\94d42b78e59fa2c5_0
Filesize
257B

MD5
05670d8934824c95b678aa0ca7c6fa27

SHA1
eb15802c48bd9d77c25a8dd202092edef6816fd4

SHA256
5aa2d40293e06468c4a201987408f30a1a2a511bbfe635d43b8b9263d276a04a

SHA512
ff01983782dae95f558732753b957d3933d7ba315917252f622e134c723d6314927865978779b31e9413e9a734e86bd56c335d62a09af69e7d0ca66dc3223ac1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\afdc9c8bebcb4c0b_0
Filesize
302B

MD5
4b48cb4d279dc6e7f5989323228b3f61

SHA1
6584eb1a1d15a9b3adaa96f261c062061f479529

SHA256
4b0c9755a0a0511404ea8b45b86eb11c6894cade8e1b208af63c5d49151744d9

SHA512
8f26699072f997c2fb30027d25c869c7e4e01011b8e8b0ee8ebf9fe9e70edc28e3d07a9284e42715472463a1d3fdf0425c18bdb9640ca6adf867abe4df8fd4ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b30ebf206765b697_0
Filesize
40KB

MD5
0d41ef0a1fd0bfbe0c40cb239b061b59

SHA1
ebb0c0452d27c4976375edf73b224f7cf41415db

SHA256
1ffab71152a9bb7080eb1606434c148f4951f1fba5bc1884512e5e5af9eb9b62

SHA512
94aa6ad201420127d7a025a74cb76211f7b12bee745e7c83cf25fb5771d26d9cb7a33fae5c10a09fce16d196828158eae99d1dcde6c0e95cfdae746359b59e52

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b816acc3f999896c_0
Filesize
294B

MD5
0f6eb5a4d338f2831b24fc0a4f029d50

SHA1
67e7aa531f2b040c2358bed22eb16a32196769c8

SHA256
186781a79c0b0f6e396b8272679ec9e9ee5c7ef820c63fd04380f5ed1e96653b

SHA512
9ff21247422fc88ecb0f9a2451d7be23d6ff5c960cc68dabac7b60440b0cbec8034abeb2e1eb9b623c000422a563946bb74f007f9d9e7171a6477f29e4b38ba5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b816acc3f999896c_0
Filesize
294B

MD5
497fa34178e1da014fc8d5c771eefeda

SHA1
708e3f7170305e457f52c6d882747a998d993b68

SHA256
1980566dfd6d7a88311584c2e9d72fbc6d59f60745ce20906dac8472e7bde85e

SHA512
55d2dba8c72b97c99d413fb2cdb507b4a209bd6235484a344b852b1d06f8ff0dec86c14a7b38d15844df0c78fe6c77530613065f33483ae418f9c5d9fa595050

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c1885fd1445d7bf0_0
Filesize
34KB

MD5
5c5ac19520572f745b2451c387358fc3

SHA1
1c7ddbb6c4be35e8b82521e3b8dfed685585d808

SHA256
81c71469076e920149d555620b965d6889290614daee2d8b6387ace9177d7327

SHA512
f22a54169424fec6ca38266e8e322ca3ed50ddccd4b6d87e100aa0ad092f33c9630f67bcc312c414cddbd45672181efac3ac74b00e0fa890f16659bdd3b9c43f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c7c7d4d22c5ea752_0
Filesize
54KB

MD5
47c5b9b88f3f0aa2cf5b998a38214c0b

SHA1
863ec275c4607e9f7a216706e7fc455f4ac6c731

SHA256
dccf416ab07e01b16e16b347bfbf2bb1644dd0312dcda8ab5ef3193fe4af3041

SHA512
077dd7eb5240791ddfda9688dfdd2666917a862117cf3583a32603c9c987373e42d741ee623511b8a67373b5d83aa0fc95f2f5af0b3b9141899dc82662472ccb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c9f38a541d458a2d_0
Filesize
431KB

MD5
743b8463729839f141637c50e3cc8a52

SHA1
6f3f7de49a1bd8fc28854c4eb3090fcb4028215e

SHA256
dbf5340518916a80b1088298db39c82d5824c9b3144296f06a43ba2b45121cb8

SHA512
8176b25f42a30e4037845f31ff4c717c07c8b155d4e90fbe41b84feaa366e600528461cc3e3c6c28c1bfaa4456b6962378166afa3dd3fcfa29b7257828aebbaa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d2172fc27031f8e6_0
Filesize
287B

MD5
da9fc63aa4c921944fd48e7148aa65d9

SHA1
4bb98c5d50a53de60447026c3cca3a82a33c9258

SHA256
161ac6a2b7f256cd5ae3450854a0a780c9689e9157170ed07c9ff6b828113e33

SHA512
361615f9446a1f6638f41550d180f271fee957eb56cd96e169e0db547f97f4c31cc107beb8744c85bb3dc81b1825703f9e1d7e719d09a3f838987e0cb5abab7c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5b39ba0c2fcb1c8_0
Filesize
261B

MD5
fe4a39c87645e04d0179ff98c7eb9189

SHA1
207ab27db343b80ee4f2f5ed3f8e93d44978e9c0

SHA256
cc44e49045ad477c42300eee83f9bd37b6094a347de568cbae3efd487b97ba60

SHA512
150725a24ee9e2a3cd06c4cec73660401fc0e3add6ca3c307e131d289a5e5f2a7130939e8ca34421797551bed61cfb39dbbfddbd245de1c22b400abb6d9ce07b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5b39ba0c2fcb1c8_0
Filesize
301B

MD5
24ceda82e84ffa05f9bcef9afa9a7345

SHA1
bed20fff3c6b2e5fb896fa3c249f8634493ad74f

SHA256
651fb00eccad852a613d7d2f25d2c089c8c0fa037f4861e9c094ad0d75718deb

SHA512
dc2a4d426cd11dcf3cf2a1b437b44a88457fe517f94897b3ee80e07547fe08830e684dd60ef5c8ceda25e83f259bd1974a99208be4d052ebbbfd40a6a504a43f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5e2b8f80fc06ac9_0
Filesize
431KB

MD5
29326886fb270fb86a61fd0bbdd846f5

SHA1
a3202cfae61f8d656dac167a4fbd69e9c58d06a2

SHA256
acafdb74887e65c98c0347d0705b7805792297e01cfa04af0be205bb9be695bb

SHA512
8352c09cf16ddc6b0456c97d6bf59417546073c53b40192667ffc4c9a64f27e5ba3bf12bfcc3203da4feda867cd621f8c87047dd54387cf74bd1154e28ac614d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d7e38f95e8678574_0
Filesize
35KB

MD5
9a9e7358d60c08fd18fc06b08a309911

SHA1
b77de28a71f4e793d1035a923d9e8c91e8f22d78

SHA256
600f285c25642f9c748826d6f9429d1957ba1298b9daff88ae08be3a3050923e

SHA512
a20865a74ae411adf5b88eafd8a9d38f4c566e5523532f5f72fcda245a94415b3f4c47f424d81d4f497553d464dff4130ede70cf99c4e0fe02a584c402b59b58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e46f9660c67c85a1_0
Filesize
252B

MD5
a14e5e0d3ed371277ef70487d6bdc8fe

SHA1
9ee9c8e21104f441a4e1f4fc107145c874bebebd

SHA256
2fbb3ccab1f2f3759d9b658f3c712b4c823131068af08d45b3871ececa3e22ed

SHA512
56f3e60b9adb295e8f9179e974ced9aacfbdd72b9dbdc27e25e037f0a6aaf292d913cbd23b0a836ceea032bec6099a8ed8dd3395037111f727575b21a8c84bc7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f398698e4efc91a9_0
Filesize
303B

MD5
8a9d6b871fbf022e526aa9f30faed1b5

SHA1
a074fbf6c8e4a628a5ac880eee9b996fc271301f

SHA256
d9e4f65d0df9fb6bd30054e7591d33308cdf61b6d4f9e6753f3e4edb1829c4fc

SHA512
5caa1469d5c72b78494a3964b31ef353f295fdd450771dfb9659c79b962827409c520af40213d89b1356a1ee28ba479c3d146005b849b6af5cc39ca9b1b2035d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f803ed673f2d0ba6_0
Filesize
402KB

MD5
92963ad260c29dd2ac5d465b8640a918

SHA1
6d6167730ffc23368d59dc61e97375f1ab5d6355

SHA256
8693ed5c0ea3288a5310db1ca6007d992487be95732d4fd28a2aac5a47e8cd65

SHA512
77a573998ba87054ba9eadbe36907bc233002111711d20a1c8061535f8d595da600886c157b7888bed0f1271e6ae1ff4b2d627cd140d607771c3098bb12de015

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Filesize
4KB

MD5
c0fde41943a8dd36316ba9a80172383f

SHA1
2ca8405ca68f2ce972246a2267f244a3ce5ac2dd

SHA256
5a99317c3348b2d82505918ab239d0a3f6d7efbd4024707156e876cc5bf0953c

SHA512
b4e329250d2987f2b399cf1c0b3846d758c10a4daf66e81dac0b0a45f03fe69d5a8e0d8d8c8ce45d2c333734f94ff478618bbcaa2cf8dc9e32b18a51aaa41155

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
216B

MD5
3245f7b275740f81764721583205075b

SHA1
a1247d5fdd782df445cd65f7057094ee9d4eaa0e

SHA256
17df4c1508cc287128ba5f5212acfb0384a3f4fc8bc5bf729e7c390fdea2f8a9

SHA512
ee9b2b388cc0b163693afc086b35eca721d07542e4bfa83c993894aa4ca2ca5ba7216f27b6d7fe09cb6aaf391e7483f6fc5e4b3bf0efd3dfc01890f2f5c72ae6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
821cd748c2063a4c8b7a9a5a87b0e8d3

SHA1
8e7d0a7a9ab97b950fa260a80b720c21b81f288c

SHA256
cafcf102ac85ce41ff4a8eaf559ab2d7eba9d740123607e2e89f1ac8512aead6

SHA512
c97c9af07e4b271ab12eff2a37ca90caeee01b44e0f4edcbaf94fc80f54c7f31c4b826fbceefc1caa986f033a6f588e74dfcc18de07af574e8381207fccd50eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
379231864146af5d75040b71d99073b2

SHA1
9e0754e1cfc9dfddee0a83e606db5a867f19c2d8

SHA256
2c4529a5764480c05a03dcc2ada28843616d62140529dc28ff19befd73d5ec3c

SHA512
fb81547999cf465f07864f910c72c156712981fea24a682bd57175444af93678892a5d199d593dd0ba15057470f5af210b6e006154eac83b66ece65469890301

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
9a07b78698720960dd1bb4c3a24c0088

SHA1
674c0481fe11ff5d138a379d57c7e785dddfb7c8

SHA256
c0f868d995321931ac201ea7708dad7d90f0d3d607dcab42fda72170ecafcf07

SHA512
c6fc05ad7a58b619adf4fdd6fdefa848268a01456bff496442699f3eab8f1f6a2cb0ad44b98db34f2222deb37bae5cbabe9347d8c1789b906849e1719f768ef2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
e19fc8bdf5a5e8b5c6cf68777d62a6ca

SHA1
28c47ee7bc8bf1a8c72de2972741b029b5499a59

SHA256
0e69f3e9f0d741f8a4d6526bb9e7b773ab86b8d919adb2d0d2584551675c2b15

SHA512
2f05a43bfc436f25f57bee82b4b30e6ae52946f7f0c837824d871e534063bc80943d0a22816dcc25d4970b4b8b6a74b160e1307f7258f6c4672f2b096a622d5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
c4249eaf033ad2f01d9d2c4dbff6d413

SHA1
b778ad992af4a057598c3fe6ceb59b887ff8caa2

SHA256
7a2a8ccd6da0ab35d74a94077fcf7fd31b2ea70b7a6adadbecf844e77c264a46

SHA512
00e755f5125caefc11a4137b31a47bd7d58d915fa178bcd6c538cda8752f2bbd7cfdd0dcdd31a7f35f943cf6781f7396f6ff06c38ecc8d892952ee583dbf3d05

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
ddfcd66226ddfc20eb6737bc9324ac51

SHA1
e8267b90cad32920167482931494785d805ccfcc

SHA256
e8dc5c7b2fafac08cad2d61aafa0c5ea5d94aa183603424b30a2153e02c775e9

SHA512
e0ce5744e361bf49ee52b0742b68390a972ee611e50a527e7581c3f71e9babc28e4a0b65bd14aeb83f73b59ef8452eaf7c0d613706335101473daec2857bf649

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
ee1f69dd12ed39e4d8136c5060e029bc

SHA1
88e30072c7ad1871e8be0999898444fc68f3e010

SHA256
535ef85368d2ada753e8e581e82f3182ae82f5df07debc1e0c35cbfce4ace5a3

SHA512
715ab525eca337097973bcc8795ff3a68b35708866df2f60294e5a4a02553478e948f88ef3c85ea09209ece08dcd0fb4ebafdcc4d33304f4559f451e1dbfa2ae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
26KB

MD5
0cd807f94c8f0a08e9d99036cb689f89

SHA1
03b93366c858a7ceee41e18b7557f1d5b2d8740c

SHA256
84b4b7e8ec36b30deca7e5ace04553f4e4e1f0fb9933e659ea40ce19787d8941

SHA512
8a4bb640798b84c02cf390205d2ebdba29abf95dba46e5ff9fe7d53e4589f3a6c6debb947e501c29034fb98575d2110de6e4515793ba1ff9e0729fa8eb97b558

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
89e1e148fb42b4dd517943cbe138be54

SHA1
56bd9d463416f5cd6ef466ecb07dc168e58246c5

SHA256
a5b8a564af324fe48c1f3f1dfb6ba1f66bb704f8dd97869a6aadf76808976544

SHA512
dfd55a3f3485b1068f6dd04d0e47c89ce05576758971eaba1e5644e88704b41f2fac6ef61946591613cddbc6d1968a1e4a490081ecf3ecbd891ea2b8e8ae940f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
30KB

MD5
7d20dd700beb2b4f5643379e0bb580c6

SHA1
2825da03d499561c4b13a36ae4b06d8a3aa132fd

SHA256
5882d0a7d629cda532b0774ce8607755fb06088d5d4223e66286d6f4ba3edb72

SHA512
01101d0f206c9627d59fa885c2a4d85fdf484c486427bddeac13bd8e29dbe394eb5d23f0e667a1b4084bd29a4d71d10ea1be9c88e2534564c6961750b2669d7c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
30KB

MD5
98182e57481496cb5ad6797647a2f1b5

SHA1
e9814459abb937145233b35834bb2a1858a5ac1c

SHA256
0c3614bb1cbd6c26f1d4a4172172a44e475a15026648af37d1a6b48d259e38be

SHA512
aafef503047839d6e2aaa9c675df42984bb51862cb39ddc1391280c65fea22d7f58fbf8d196c0f9639e0ad2723bb6a19632f94995871c4aa04665d7903aaf197

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
27KB

MD5
2b4029451d08c67fd2ac223e7093e443

SHA1
fcf460c3f70bcd6918b01f63634cd71eb06d8b9c

SHA256
15f0d4be067f6a4fd4d2f00ab3fd2914c6ec735e0ff5c056b003eb4b8251ce8a

SHA512
24a7ebffd8a3b93101860888bcbbf4181b8fad720721bf84e4f28b9c9a45b7cc785c3bd2672d4b9c6c273f898777f3db1d16bd3be2838edcb0aaa469aaeeec11

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
356B

MD5
cc99f3552ce5765dfbab87c571fca243

SHA1
ba6dbce24076bed96f7873c3bd23e64e7759e150

SHA256
63c21cc796634faff74d900a24a16ad7db4bc5a62d3fcc6ccefc952a470c1f12

SHA512
2540d24b36c4311717a2b007efd8b67ac6be1a48dc530089974a1d9ba9add71deb36706118c732639822bb925202f83c1ef285113ac4c51c8c8a293818a7f150

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
356B

MD5
072b33d901313ead98be22079d8fcfa7

SHA1
659d10fe49bc81632de4640ed46615125e706296

SHA256
ffffdaa43e090c3fd8ce3bee3224c2c076717215b1d0077c3439db0b7fe969de

SHA512
716372dea288e6b2654c7fdfd6d71b0cacfd414fdf4982ec01b6f252e3bd646c30f179e6a304a032c9c11bee50ddbf38f05dad1eb3270a6a9604a7eef98ddf7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
2b9dfcfd391700c68c5a81f26f3bbf51

SHA1
4c84cbd2ba2d6c9bcf23c9cbe230079b7454be38

SHA256
b777dece7329153b9e77a3eaaf5975b75df99ad37905bba9521cec9024391b89

SHA512
c955cc087173a84e73c6e62d43e1e13a2bd6236304ae27a9df416525641f261c90257c7ecd6ea5c595759db7cfd6859b709c6170d6f3533675d3c5238130c62b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
6d849e92671fbfef852133f1330d498b

SHA1
1113d4f0d8c21df8ac446f9840004ab1945c8f83

SHA256
f696015c30957f6139edfa56041dbac6396e7115d6abf548de9ac7e4c8595b12

SHA512
df71ead35f88d13b3ccb37e2f76cf8cadc8c49e90cafab40068c10621520376dc73c31ede9e5839c35b7af0be89d242c4926ece805744d3b410330c1a00a814c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
be023a390d6e5bddaed267460757870d

SHA1
155ab13c02238f0af0fed10ba6a19c8dcd50a0cb

SHA256
c7ded785e20865b0c66274597821f52c02375c423b2d62df236812849f6bbc45

SHA512
61e1838b06c6e4fdd259d90b942ccc07d2bfeb83f252e8ffb9e22770a63e0d5522ea20b0d51b2f336a35848537633eb1d148702c815303d86b760d0d26fb3ab2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
4ee455906d73c84eeb2805b385d469e2

SHA1
4b1365bc0768361908fb213ab2c44207fcd7d23e

SHA256
26b9b051cd27f779bd43c95f72b8ba96abcc15f7d1a6f2afd029352b4136cc2e

SHA512
92e9e0333c6a2831b6819dc7b36fc6e5f46d505cf72bc0ee3ad60a14b83208fc9f7345dab5b0a8afa2b2f2e49d62801ba17b7082902b6a015de749d17fbe24ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
d67327d5ed20d872830aec83916504aa

SHA1
d1501e13cf26ba0692fd3adffad75293d17729b4

SHA256
d7cdfda0ae686e4b72fc0ef89f29df61194b35efc2e5be06574b5bb8f2198703

SHA512
1139d65f482ca99ba22e4e3d00dacbf5426e2e5b95cf04087ba180ce6d9177b63296bc08abbc545ebb1e337d2a21ffa1e02b02d164649efc5d6ba5637e479a82

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
0d11d9ecac18f83ae03345435bd93234

SHA1
97ab1641cfc4a3ef77ae9ab8ebed8d66c608eeba

SHA256
1ac5162dc9003af527035b508e0179a9f54a42f96b0df62a9a63d093f34365e0

SHA512
43b2ef2df17aab8e0a244f0961ce89202ad11845b302103a3687c1c8a98de35660f08dfa20e9599345465e22ebcc1ebb2ca7c3445a570517a1b174a6d76251e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
388d5370dedae4696dd60444aa867c02

SHA1
d7d8cb1e256566aedab5a00f2fe87232df003db8

SHA256
8548421607b0e53db556ce38927d0717434e893fc75377010887d5afdef69174

SHA512
6a2b6156def5ac42bc55f79f0cc3d66f1d8a2a088addc8c0c655527583a12b885ab66615927ce6f66baea3cfb3ce3722f04c9fce12dfb875f8d4eaf5e62cdd02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
1280c1f472a71f1154d6c2fd9804f09b

SHA1
7e06371059fca171e70d2ce3638eacc72f0bed6e

SHA256
c92e6e4f02f95800d29dc72bfa31d7d5dbaaa27aaec34583459eec340de38bef

SHA512
ec5900a87eda9c80547a4b1174b26ccff6d54bc4012fe471dcfb629368d87dfa4d720855e62bc89bf70aaa92d24cbffa0b5f1d6968b4bc9e3365a6c9a3acc17d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
4KB

MD5
752a9aa433dfe733ef15671fa27186d6

SHA1
c595daeaadb11d129a82247787bcd2e2227efc8a

SHA256
99415926a18b72b087cef1d3cbc5f7d7f0abfdf900248aa460626ac0f01d0018

SHA512
b9dbaad537e2e6bd508bd9580951ede1ff37fc68c85296097451258d3d7066fc1b2c0e2642bcc9ff771a71c17bffdf014edc24cfcc700c116165c3b6d4e8ecee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
ea61699e5fe183e8402ca0e3a4d9cd9c

SHA1
b32087147edab827cdfbac2f3b338838ea88660b

SHA256
df07bb74da00f415620b8fe422c2dfa548dbaf66b761f21b8576958c0b923127

SHA512
64e459bdcc8d6f05082752def57c953983d531f185c867bbfcfe668e11ffb5404eb669a02b22cabd47eb56587f57c649182a943e15942a3c8dc055622b57ef73

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
da19d094ea1123bcbc450460b0a17897

SHA1
ec614d7ac7becfd41d57a91a0665d5ced99d9fcf

SHA256
9bb0ffa63b6d9f9424ab06c8cbf51aeb128e71cf1542ee6512ae5b442301a122

SHA512
ffbe6720be7ab00f0b8f1f0abba2ef15f135ec3374627d35ebf604ead3dc85d869a92f046cccb93bff2a9d94341748ad4f5263e56ce07b878e3c83f3d4af1fdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
b08cdd5ea89767e73e4b5ae04c1f2cf2

SHA1
2464d26e71c913045cc5584865d17790c7b385c1

SHA256
296a296d4796d1b407e1216c01319dfcbf3e4811d314ae6b39b1c643cd3c2c1b

SHA512
5b81535ef4371b10723a3b575376765c63b55d708ea9fbbe36e62cdd41ac21eb4f4e67547d90ba4a216eaec0a5ffea03a87d00ea2fec998c4144cc4fe62e58a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
e0d0f37b9ffe92481c26502c547ee5c8

SHA1
2be26e42ffeb20207aad6c9f76046ef1fd55d0d7

SHA256
ef8ceba3921e8a76f7d2d60f6e5ae49d58c9cdcf6e89bc45a3649588fe9f700d

SHA512
c31824eac443360a1b4146534cbcd299bbf22850546b32132b7d14e340ffdeee41a75e20c914228ac0a50f1de17f0387a70f07e376e4035701a84cf741c6e90a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
a19f90b8dd8ad8bbacb474016d778d21

SHA1
0853394272ea612ae054d6f955f433a0eba95a5c

SHA256
ec4703893216fd62d168736332501838c8b7a12c4426bdcf6180dac857b06f01

SHA512
88424e421b0d4735fee26e160f9b09394f8705f76e2d2237e7442a6c622bd05758a34d1fdf278d408786d00f6a95edae7625b0da848b3c3dd89799245d18ec4b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
ba76e8e1b7ed5781e95d5d45195b85de

SHA1
131894a9c1627d300eef06914b340923b1ab1a6d

SHA256
ac229bad18d44fb1f627d6c6779dc4ae5eb91ec25c2be92897a466a9ed069969

SHA512
2367e2f611d4bb3e9fc9bff5fcb48d62c894554af1ede09bf2e34df60085617904c9a91a4400482fbcf402cf4e0f409879627cb1c67caaafcb9f2f09ec2573a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
5KB

MD5
1f8fca211acb8bffecede9531845dd84

SHA1
ee50da20c2928360e8d37be3b95f11ed6e88d5c8

SHA256
a6ff7d3c2e9f3947e6038b799efa95fb6baf07ed11fe7adb8f4d7a341f54a164

SHA512
1ce6b3adbb6855a691a1145b1e5b905b271f227e99943c2ff8bf5bf6c7561fa989e9cf93ef9e482d4c9659ff97769644eb5a72bac8aa689dc0deb292def3829f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
6KB

MD5
0647b65aa8567edd7777077dcbb438d3

SHA1
b25f8a3f9f5b95847bdd4df2cacbebe2db319036

SHA256
0df6e07ad8fe3cdff3bd56375d96ca91e1fa796bc8beb863287778664e52af43

SHA512
6cdf950cf58efc812b5af2c4278252408a8f2478af949c733c85b0dfbb08eb39d36f1014c90686fca795f2ce622aaf3d4dce75fe9e41b0db4a5ad2c42077aa79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
a5bd7b231cc15dc494ad28beeb0e7ea9

SHA1
046a1a24c44b9bf437500294902a89fdfd8a76d2

SHA256
98e3354840f3747f4e2382621ded8d6c4c5da8aff0c5d419329ce197beb07ff0

SHA512
fcfb2c2b3ca1bb4173c948c0d8a294764ab9390aa6ff604f5aa11b3b0ebba01e2850a41d82b7930c7b8aaa7664bcc8ac59f005bad551438dea52c53664592b0b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
7d5d2bf6eca28106c597cf6f7f46853e

SHA1
e1b687084fa23f159589785cbce5a94b3f1f0a08

SHA256
63c685415265ee11ea195e97c226aaa9d2eef519789c57b7d4861182425dba23

SHA512
637c726b307973a8f10afdcd83069d95e1bcccaf0623384fead0505bf037d94c13539c80bf1e232d529dfd6733ac261dff1165a7f9b9e6141329e95098362d21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
4ba106edb3e266c87798ff0df717e06f

SHA1
7bac3806c86dcd5ddc5938e3863f527b4572394b

SHA256
2b85b921caa68ef7490e356069abe1af76261c8facec81974dbd26f78f100a0e

SHA512
85345e155208f1c2fb87ace7b02b1c715baa526ca772664c22a4cc2efa9d24f54bdab26f5ad69ab0ae7c13bd5a28f08725951b9141b40bcfe29417b0ac7f839e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
a3db18d15387ebe416e109627f6f9c01

SHA1
1e0e85e70b2ccfbc35ab9ef1abba714c9f53c4ac

SHA256
87daed6563233b17f6b32e2b36183660c620578504efcde0565861ea8dac8fc5

SHA512
b19c67e6302e48713a8f93f81b0375f215bdfc599c6ae356a39ad0dd852e22e35e7fc437fae4b76dc3d4a4f80719fdd0765475bb4d171728066da87c457b8629

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
64833df736c46ccd48e25d66a3c2112a

SHA1
6cecd821761cb532cbbfd10f69bb4478383d22bc

SHA256
93c5c3d167bf33439f292a0959faeeaee5d666e41a0a5cd231a457d3ea399338

SHA512
882147d5c4c1318de51920b872916763f146a4c5e5f40b77ebe4a003dec5368e24510f0689cf2facd5ec8366f63672b01cac09555c50a1856e94b0d1b3c76ae7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
85fe8af930e91d78a6eff8850b91def2

SHA1
8c010fae2ae61c3c2adce6845d22396f73566879

SHA256
7687df97a1b54a38e4780563257b650dfa00fd3bf8e273c3eda78362f83148ea

SHA512
5f0c153fa2be4c1798b024431018475329f363f62402aa997e88c1ad43402fc484f672e07a938f4189a35cc4666d94c5fb716f1038f05311a19da67af71e6a18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
647edfa56a2807e90285f3a971155a73

SHA1
a1dbdc537f3b61ec78093504c53ee3703fad5945

SHA256
d53e8c3266e8880f7266b1ed464254cc7fab141c94e5c1771972d7d227abd237

SHA512
55cb92238df93b034548d418c91d847f9d9bb4840f15ad87f9df7e3d32741eec49a946e13b433780822454252fb9f6059fbf1df393313facbbed0b540d13f07c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
4187d7e425332e22006a13ff23b32de7

SHA1
a049b4899b3e48fd456bd2506944258ef19d3d59

SHA256
34e676a1d1b35072a1c6d83a63071a17e044994bc688cc53fb45d04677b97c4e

SHA512
53127a5b427ea359165c7ad442be683dc9e1dbd9423b6bea343b26d7c293da61fb4680031a17b22dd739bf4abe3787b60b87a54306a2eb33fe9e7843cfe571cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
d0e88b4d76e78e578b392ff553dbc80c

SHA1
e8c1e2f066f0fcba3371568bc4944190a7cd156b

SHA256
754a361ab2a0f3f6f743ce2790fdad8fb439d844d15c54fd16035a7707a5a47c

SHA512
a1ab677ec0ecc5342f2e24da98b62cce5ab282106c229c91b3639b1d68f3fffee3376bb684dd0d7e90c1701fd0044bc99bc5fda31b90e8bb83d70bbf8ac604fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
bb895b4bd6ebc3254fa2ee907241ef5b

SHA1
301efc314237a4a6495abcdedb56d1b62c8f5343

SHA256
378508e31de541b375337275c7a38930ae863729e660be9e2d541a002e9bb17c

SHA512
e43fff41ee637deadec8f8440d02c2f6e99dfa38aa39e6fff1b028f8621ee4ca8d0b5ea1165d9cbfc468693d82ec61970958864db462c56a81edd6e36239a187

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
e1fed5f38e240306d138d9b9a68b061c

SHA1
5143d563ed26ee74ccfa2d6f9d0ca370548fe50f

SHA256
b4a3d2ca997c8b0d5a15a625d6d78d182871b59615d81735b183b5dcb4cc97c7

SHA512
91ab2f92423861e9edc8a65db45354df845f82c47ae74f2962c00dae01ffbb14c0e80f511169a494ffe28511380a02a2348e5b2a81c1acae119df26e8381acf3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
129a73b6a2af590854f09cb199370564

SHA1
ac3e8c2267fce29b7e2c5aeadf50e77d30328683

SHA256
8c1511859c14c5476592fdc3e2f53f55f21ac0a2fb5927b24cdf61e54ee200ba

SHA512
fdc8407c309d77b7a1585c06f65256013c346e1e29a25850410384a878464c65ca47f25b78225915457e2c4ba9da145095648df9e21057e2c61e2fdd91267718

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
484f216a03fa731a351eec934ed6980c

SHA1
f796e1ee80c7462296efcfec7de03ffeb60f6b28

SHA256
63f7d80963af7f01eb9b1aa0ed52cb3d270c6ec390a3fe8ab070f25f02d734af

SHA512
9f29cc2daf2242557526aff816feacbd261fe1ba1b6559b1c917616a0e48aaeca41388fe721cd1fe61c9685abb97b529028fd741117fc5bab38b799d383e63a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
4820b77a98207f3245f4a05a1f889679

SHA1
2b6a09dd3f79055db86877b33cc9b5998c7dfe2e

SHA256
8a1312d5807c66d21983e54c901b39a561acba93750271aab796df1d8bfc125b

SHA512
c7ec48d311c6f752a1fbc0d48f8ec59a0954631114f11733ce95863387fddae6c20b1d0f5e2e39746993503e0f5fc58f6a3a834fc3894dde167642d5ffe35c56

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
4109af153d8574509340fd12f5636a59

SHA1
232be0f30fa808f5703dc21e0647e7e83ec0490b

SHA256
323003e827f56210fe6ac90cff13a38bd7e131941b7d3fb79dd4363ca5db7915

SHA512
b6cfd561379b2f30d8deb7241a878324f14c8811d13fdb30c67eab033bfebb1ecb19734fff1da049cb7a4e0824791b783168417447bc4b3971728407d7dd1fab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
bedb481da8097bb922ec4c3cfc810f2a

SHA1
b0db5ad3c5c20986cd62095409c93767cf6e12cb

SHA256
22b4fcd1697892f808794da80449d562e2c4808d95b10c9d4f7c1669ed88b812

SHA512
0d9eacbe34bc6272a31bd2715e511e308080caf1d0bcaf693de7e5b0588b2698212928c95652f7f1c80fab0d5ffcd9966fce8e47aca57c8976555f5114f0ea36

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
a90ab9a4838b7134252693ba240ff24e

SHA1
923ef1ecb51c327885c94f97fa8527e0f1ed09a8

SHA256
5becd47ea5f4de34bc05eb941f664bee94b25944d801bbd7ebe01900fd2030b8

SHA512
0b6e632b698d3b75eaee45b5514bc9a854e0a429f25992f9ca5dc5d4971702ce7b2fc74382c7c934907ae4c6402fd0e91f602c41fa5576f003e396a74e16fdcf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
0ce7b3c97414817324258fd555c5badd

SHA1
c4939594f4d7e07fc9af9330bbbee29e15379121

SHA256
2f1c2f3682ace49b7fbada505e7b6447a0fdd63fc5d70a48813f2b80408268c2

SHA512
65d6a9d171387d42f19a4de6d74a30ef27e2ecac613e5a87d117d2de911d1adb718eba6c7f3c1df6a0adfadf74fe91cc67db98cf9d47609cda39281d7cf96170

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
d956966111f78e7a298fd9f3e929236b

SHA1
72e9a60c6b7cfdeb19fa1d90873c17ddc969b55d

SHA256
5eb82d0a1eb84d7e68648d5a63d5348af7cd736c4dfc19b61b4631cf4166017c

SHA512
9787165c0c30771dba41482bb0a468a0a30d00399368b988cf0386c505cfc8920df28a21ea0d47b5e0b8f2067ec888a1707d91bb31dfb4670c6245b23bc6652a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
943fd2ba531103919739f512a6db55aa

SHA1
5590e4e4bdd2174dc59d10bb589e171af7e02af2

SHA256
a755c0b3587180e7e946ca3ccaaac3ef933297e3c6de416298b06020723028fa

SHA512
15d7e9edd0aa89e20e6c92f5f49e8903f7508e43fc00fa0404622c7e70d893be2a0402f906611b26b1951c964336af0b6550f73336a707bbb68631159b5ab827

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
0af845601d6a480109eff7a7dab98fdb

SHA1
873c984a948502a081ae8740121695e15b653b3e

SHA256
7aef5adb4ff6c992a36968fd815c10b6baa0323fec04b3e8a947a20d3fce2d84

SHA512
b71faf77fcdb81e410c98944eb126e75133248605db18e3a09bea25f6b6ce5967b89ab9ac22c7c4fc23c8c4100e184f18ebb7dd3b290fd21eadeb15f1cb080d1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
cd06cc215bc9bfaa5e076c4b4a1c236e

SHA1
18f4bbbbfd2ccb9b0e427fa10d39fcac2bb1574c

SHA256
cc16b87a86da45995278f7d52bda99ccf31a556be7435f846b99351ad3918ecc

SHA512
174a5590112bf105a8d8a08bf1e0b389b001fc1deb626b5071eddf771edd00bbe4652d886288489fcbd79ebebc71719d8d749782904080a1043837cc2b6934c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
bc9214df0f61981a3e79670b5853b94f

SHA1
cb0ba14789908a552b7eb08673f7e35f337c5271

SHA256
f810920fa52a6c1ae393e636746fd7652c24d3929eb6094cc636f27cf601f6ef

SHA512
cbe8d7f82c60e7062d24b03a62f0e4d913da9a90d8e741a32b827b4090cb3579003a45a5e9b88012f999bd4ac461c981a1e385f891482245bab483f4b3c0d43c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
ec7d7450516a8e86599f371bc19b1ee9

SHA1
6bf1aabc82e63997c647e519fa06aa31a00c6b43

SHA256
6a8b1b1e381ecbf9c3f1e605ae61dfe362bec9d9c975b96e750837af7630a80d

SHA512
f5e8f8fe630b7afb97d9ba456dccdb3ca3adbc4e09593c5ee57f20bc8391c0feb8b574646a07891882be78eb06a84d02aa9247f8e6947a4281e913400bae437d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
e75bfc76d8f5474f1f4c47de7f03f08c

SHA1
3ef4375043fb33b5cbf6a08c67e9378d94c9f832

SHA256
53df3ab3bf42447dd793221c7dbc8114a88d256c962accdd76b629a0a9e0b160

SHA512
91be1fc5ddd91f7e39a712e6cd6f6c65238a5ac33e612aa182c550ed0c78cdc074c2b628c4e8795991bbc7409aecd67a44fa4a9e4b6833f69cb7f7b289435bbc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
48018cb53b1c12d18e17153f7c5c6ac4

SHA1
489d86053b2fc4fe1bbb6df75a80de8a6fb00700

SHA256
c640d841111e932da72cc58355a43f6c3f318cec84b6399c19c1ab41fe6656b4

SHA512
613d4180a05c42891b18434d6e83c0aae7f16d90bd2aad3c7a5b1f42d358e3e2788a0bafb1d8eaab143c79df02a689f0341e0b03c4a5f5670f79989ee19c5f92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
bd1a4968bbfd69cdc34786dd89b959d7

SHA1
3798ead499d2bcd901aee8ec3e4bad91d67b84b9

SHA256
a79fd1456a420c5bb9360bdcc1ffb6d76006825470e7713305ab3bca89ce640e

SHA512
0ccf392ff0f571451df92730684602d8edf9864c081c03875a53faefcb8247c14c773ba149539debcf1535f9a644eca61c61397301c0f6e89e102b6e8fa365b9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
ec422a3887dfd9b099812553f44adee6

SHA1
a8b71ae6d75bf483e34ca2d1c1cd619220c4b9b4

SHA256
9a18d43792bc220d9435af7937cb5c123edf21e71894d1117f0b959b025d0bf2

SHA512
7a90bc71b87d68915b647f559427ddffc87e084a9efa9603b041c15af2bca223b926c1c925d55a97fc30ff1feb29cf99745bb739735ba63b3b1a32df91b10ee6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
f256775bef1c6968df91e22f93bab455

SHA1
e9813c7c6e17fed19043e99f02d761addc92e540

SHA256
6ccfc9a80bf2372e2b2b2b8ce2a5135f70d9e1ae6629a5f0dcd923c4c57ac63e

SHA512
cf2377df3f646590285533b6af8fa7f659d432ffffc5b8e2a59a1f88004db1db297c07b8fad2b6f9afceff89c2cd03b3dac909395cc8bedb380aa9eda2b10025

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
515d71e9bab4959d9302cede3eb9b94e

SHA1
ac020fc41eb2c4523ab379b4f682e976602d4bbc

SHA256
3772762e7bdc783f78ce7f41446fc088f29ecff0eb53c73314fb74c5da260575

SHA512
6bcd9c59c80faeca7286588b9ee2219ccc7aac213f2c45d59ac2c543664c1b2f3955fa4bbd68d7da04e463ae5846bc0ea54b82d8ef79178ebbed1ffd2e6e7083

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
87d6306b005a5c3e6a0c428c6b13e2f3

SHA1
5a20187e41802e64e6ec3e6bc48eeb4253ab8474

SHA256
06c537150585f9dd5cb2e529bb6d4122be2c801ad5931dcc7cdbaae50b5cf93f

SHA512
917c48c4948af86881fb77f380ffa199a33510fa20a67a2fddeb12bbe0ac119bcbdf7855d680f971e68a83a0b7d315f48235fc9aacf4d10164d4f6e579dfafe7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
551955ed9c18792102530e7193b6c986

SHA1
14d953f03ea9072a708c84c029460ba9a448c09a

SHA256
cd8bfa9bd2a45ec0ed58a722981a69373dabc4359f7a3ca01c25c216f9572315

SHA512
68da7a61e0c4f45f990dc68f67cc697cdee61a832b22f1db265f75e4b4d2ee541834dfb4f5681d966547c82da6a6171b9b439dac77dcb2f3c06ea8895851ab58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
295c61e587a66d3cd3a9ac47409389c5

SHA1
c78eff3a646a246faec5328c300926c7472d02c2

SHA256
764e8fd5852e0dc66ecf0af6a5d42747dde8ce70b56ade90c1a8f8dc436b5255

SHA512
f7d3bcfba64a55cdadefbd4f108a5d7c95c302d54134e42a967a1d57892b82b898f21b0af49182b7df9ce0ceba4e37bdaa8551be780b697d1d520cfd0f3f4974

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
9KB

MD5
f28275e1882dd9f87f3fc87b15d9e164

SHA1
d33be317244e05d747accf983883928d5484e543

SHA256
3a4b61efa42dcfd145ecacc9451378e03b92330aae0a5a3de2348756b2c1d0fa

SHA512
ebe7860ad7eeb0518904a2ac200d1a1a1ccc08c755ae9759a00c09a9c6cc2cd0ae657a75e636a13724422e4ae790f2b1d2ef96d94754172316dd147e88220891

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
42733e7e92df1aafe638a3981d6228a2

SHA1
2cd53c7f7ceafff3cfc2797bfe8c557e3450266c

SHA256
5b084950959e83c39f52cc9f474a87810d9c9e8ce15b704f191ea75304d75ad2

SHA512
f256c9643489db7b5b1263e9c40efedfa591a150990b64e77dcbd9edcb7912cd2e5a735ad8ac1e32aa93a9e9c20e48a03b85a126977f89c3044c38a22cb66f9d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
12KB

MD5
03ce30947c33121e2913898dc2e80046

SHA1
d8ca816bc710bf5224ee27d45a8963d1cefe5357

SHA256
8a3fd962e42ab6ba633654aeaa30531a3a75e09b220bab78e26d20d82ffc09a2

SHA512
9e73a0227d249359fde10735201098ed6c10a85277a45e18b443a0bddf5d84d39d13237a41242dae958e2278ca7902508a2eabdeb668922afa70ced43b5b5118

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
f82c2707be81b12bf4a61e0245a88009

SHA1
475be77729551c0b4d07bd9e92e291351f8f293e

SHA256
8b22dec4c3dc799923855ca1a53d081ac330d2e20595261c2c9c519c038c82e5

SHA512
f29748705be0ef196dc5186e8e9f50d75476999c2cb51da3dc87e4f4e4d89cf47af5cbc8fa32f873e78abb27f69e530f815067e88f70cf798c4db69b6163c613

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
f04dd3cccdf9a75e8b0fe40e96f5abd6

SHA1
563a93278c3b9c4027994f69381a37dec6810914

SHA256
a4f4b3ad42a868d6cc97bc2288c6cf9ac6a5b337641cf7bf9b658867e22b595e

SHA512
12ceb9f5266300d1cb34238fe628a5f90fbd62f73af7d4acb917bef7527296a0500814d9cdbabba0c0e7827ba3a0387f58939ac09d8d6a19409ce33cde665e51

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
fa02559883c87c52778306fea74a5a60

SHA1
7eeb0f3cca45099eb0f98db88697c85c2485897b

SHA256
aa6577b9eb0036cdd401b4cc9f104310f45cb94a3de630b320238005ac93cf7f

SHA512
7b75846e610df89b0819e10d3390fb7734296413ff12550f50869e74fccb1f9f565d498cb8711bc38cc47086e0bc31f3961dfe4f436aa3496d8bbd23ddbcd4bf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
98057a36c52e9f9ee98195698ed2cdc9

SHA1
7248cf117b4fa08cadb33e32a5699ec7e0643b5b

SHA256
8fa518c3418dfe20a3092d2a074164d2ac933e8b3eaece63437dbfe4d4501b08

SHA512
2cd20ed739883be51f152314b355b283b318f89ae6424f28b89778ede35b490173b009d24eb2c52cb1ac5c23ecb209202d0ab2de2ff7cfa04ed10f446cf02eb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
11KB

MD5
52be9589f2e35221eefa143a75cb9352

SHA1
c5ebbe288ce3249655ebf72b34809ce8d5b8fcd9

SHA256
f1b98a8e4aee893da39a31be8bbbac6aad3f2495f9b6dc4d35f1153810f5e1c5

SHA512
901f00736e08f0bd555366b02142ef99341ec2def2731b798dd45f49afe6f167db9f34ef2380b10a8f173730d3d65c78cf74881f236fcc803f79393ffe18479e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
10KB

MD5
6425b09be4b04a0984c8747b4fcc7f91

SHA1
21c1ce12035056ec511c2d575ae7b33c248eae79

SHA256
8a57a264d629e3085f5d80c10bbe2c7f288112bb7e7a92b6d410c1214e017412

SHA512
c3de959e9cde6a0c5ac36ee28677a55338926832208930f09cf3b41959fc1e3f45dcf1c143845628a54174ad7d8a485da737a67d3ef0105b7488a58954dfed53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Filesize
15KB

MD5
2c99647a1ccbca5d54d9a16b89f6a456

SHA1
806ea1142ac3758858b742b235c81da70d7f520d

SHA256
b58c7c4b78f62200659dc594af186c0968adc92e0a6354a336162fa5642f8398

SHA512
d6c04f46b626a921875c005e86283876e06357a309605f49661cbf0c9001b5da70d342ce6cc5953fe6eb851ca7adf3153f2ee2e7c45cd6c99c2d8426f97b3003

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f761f051-d3b3-4a47-baab-f8d1aa52504e.tmp
Filesize
12KB

MD5
4b34de6207046e165b81e8c1b9668be9

SHA1
a62f7b4fd0f2247555c35603265ae88a36d7ab02

SHA256
b835d6a0ac1eebc9f360bb915cfcec89a0b10b8b8b21a342c44025dbcea5d006

SHA512
edf3107c4479bfef66704a45ca0307083abc411d7cbf2148e732c8d46a587e9e0c00987703f1e2fd9ebd87435321f10b5353327e1e931d4770de007bea42b328

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
184KB

MD5
71e313106f9935346f32510fbbab7ead

SHA1
2804d5bf03e5119bd159580d852275949c66af02

SHA256
e1df488708825d87efe952a7bd449812e0f8015f3435bb06bd6cfafa5089278b

SHA512
b649e9f12b8fb24ca5934636d7bccf1127cf224a9d983e988976e15f875caccf17b116b1f03fb5328875a27e45f8bfdcf2cead249938a8b9bfb676df4d9d5576

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
184KB

MD5
e29924ebef151eaa368c5d207a713733

SHA1
96d8721f96dc6fb90a2a0796569d005d7106f094

SHA256
ba88468e3cb4e981de7662ff4bf401e9b21a5f26bd76061e0e2ec876023c857a

SHA512
2fd9cac401716411ef6b341c81f99741262a8b8286f8e916e5860aa088d696475a285cbfc08323d621a809036be03fa369ee312f59d5c3f1cde1b257aa878bef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
184KB

MD5
44fd1cb28632ce2e2a666baded6cc68e

SHA1
8c404ef46f5799bda5ebef81fc9eae773b0a6d83

SHA256
954364f21a366555a1fdf957c8bf66bdd0a91900b2426f3a9552dd8a653e2e0f

SHA512
4a56d9de05848d5361c92d1bde97a564afa68f9b5656ddb9330c514232905f9600ffe0407adee372cf1873bd0d9ab3b55a74268972bbd924730acccac58a9661

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
184KB

MD5
9778ebe709ff97e673e8fd8603dd7df7

SHA1
2d822645b12a09de27421fbc93899a5c9b3c7b2e

SHA256
7f541ab50e22f9cae26b76731e90f3c52434ac572b87295039f8b71abf2f13ce

SHA512
15c94a8da080fb71a9acf2e02ec5e5872b17d3884b7dcb9cbe71bdf51411c8910a9ff659d53368f2e6332a83d3fbdb41dcbd5d77bdfff91e44503be273e3f671

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
184KB

MD5
e0ce1a7d471a0f70fae3424bb7b82baf

SHA1
50d7245648353f79ad8d686dc5b0e75bb8a55c4d

SHA256
a4352e201a20f5cf23a51a02fd0cea4a2df550b8425b76614ddc18fb3aa0bc8b

SHA512
48d2699b6d0026c01ae8eab920fa8eb3bb82cf2a170ea7cf3091f34dde8cb7e69d80aa4ec7ca3d6e4e53728be52176e0d77ba96ef050f919420e6dbfbdfa95da

Download Submit
C:\Users\Admin\AppData\Local\Luau Language Server\server\index.js
Filesize
6.1MB

MD5
6b1cad741d0b6374435f7e1faa93b5e7

SHA1
7b1957e63c10f4422421245e4dc64074455fd62a

SHA256
6f17add2a8c8c2d9f592adb65d88e08558e25c15cedd82e3f013c8146b5d840f

SHA512
a662fc83536eff797b8d59e2fb4a2fb7cd903be8fc4137de8470b341312534326383bb3af58991628f15f93e3bdd57621622d9d9b634fb5e6e03d4aa06977253

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
Filesize
896KB

MD5
786698605a9029da9cbde82dd7e86370

SHA1
8f91946aacd123f3e65237833c6e8a2da12db585

SHA256
96f2dc37cdbaf245aa2fe137271fcad9e567ae54560f4b8812c10385501d074b

SHA512
a85c482b353770d6e591d677842e4655e6d6b05c0c1b8bb1c97bd2f5f6bcf16e18e1373479b2ee20a1ff55e16fadcafa35102a356d02c28c554e53da1a537c37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
Filesize
9KB

MD5
7050d5ae8acfbe560fa11073fef8185d

SHA1
5bc38e77ff06785fe0aec5a345c4ccd15752560e

SHA256
cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b

SHA512
a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

Download Submit
C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
Filesize
949KB

MD5
8fb51b92d496c6765f7ba44e6d4a8990

SHA1
d3e5a8465622cd5adae05babeb7e34b2b5c777d7

SHA256
ab49d6166a285b747e5f279620ab9cea12f33f7656d732aa75900fcb981a5394

SHA512
20de93a52fff7b092cb9d77bd26944abed5f5cb67146e6d2d70be6a431283b6de52eb37a0e13dc8bc57dcf8be2d5a95b9c11b3b030a3e2f03dd6e4efc23527a6

Download Submit
C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
Filesize
8.0MB

MD5
b8631bbd78d3935042e47b672c19ccc3

SHA1
cd0ea137f1544a31d2a62aaed157486dce3ecebe

SHA256
9cfda541d595dc20a55df5422001dfb58debd401df3abff21b1eee8ede28451c

SHA512
0c51d6247e39f7851538a5916b24972e845abfe429f0abdc7b532f654b4afe73dc6e1936f1b062da63bfc90273d3cbc297bf6c802e615f3711d0f180c070aa26

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize
9KB

MD5
5979ced0372a111b5286561a7c78c784

SHA1
efbb982ccd640499bb40389bbdc0dcb0ee073bd2

SHA256
f0ce4f01a45e58dd7ae4e2fc00cdbe8adecf81646b4c9795d46f4c31d31c9842

SHA512
eff6cff6d374efb1b05cfc7f31aab14d008b103240e4367b282e34b88642d5bd45e3b0c81c67c870a5fc3ae80ce694b80bfa1cd107b7d0eff1b0d66cd2e63719

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize
15KB

MD5
5534eaa63f7795e27a07f92d9e4f71c8

SHA1
e5c5b762315632663929b644623a13c5c216c68e

SHA256
04875c56ee8bc1638bf755d865213c8cb36e925bef6a9dc85e7f7883f675efc8

SHA512
71e12a0cb0b1b7e9594073d6ee6f71d8600d68c4af4476a1f1baa2257afb1daa8edca02f3b202b87ecc8d3c7f9fbf76ff6555aed6aa6c0f2f029c07f80bac9a7

Download Submit
\??\pipe\crashpad_4724_RWDMGVHKRESMJKWB
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/2240-350-0x0000000009BE0000-0x0000000009BE8000-memory.dmp

Filesize
32KB

Download
memory/2240-347-0x0000000008E90000-0x0000000008F94000-memory.dmp

Filesize
1.0MB

Download
memory/2240-344-0x0000000000720000-0x0000000000812000-memory.dmp

Filesize
968KB

Download
memory/2240-351-0x0000000009C40000-0x0000000009C5E000-memory.dmp

Filesize
120KB

Download
memory/2240-349-0x0000000009BA0000-0x0000000009BAA000-memory.dmp

Filesize
40KB

Download
memory/2240-348-0x0000000009B60000-0x0000000009B76000-memory.dmp

Filesize
88KB

Download
memory/3340-4-0x0000000009E70000-0x0000000009EA8000-memory.dmp

Filesize
224KB

Download
memory/3340-3-0x0000000074EB0000-0x0000000075660000-memory.dmp

Filesize
7.7MB

Download
memory/3340-8-0x0000000074EB0000-0x0000000075660000-memory.dmp

Filesize
7.7MB

Download
memory/3340-7-0x0000000074EBE000-0x0000000074EBF000-memory.dmp

Filesize
4KB

Download
memory/3340-6-0x0000000074EB0000-0x0000000075660000-memory.dmp

Filesize
7.7MB

Download
memory/3340-125-0x0000000001410000-0x0000000001418000-memory.dmp

Filesize
32KB

Download
memory/3340-5-0x0000000009E50000-0x0000000009E5E000-memory.dmp

Filesize
56KB

Download
memory/3340-346-0x0000000074EB0000-0x0000000075660000-memory.dmp

Filesize
7.7MB

Download
memory/3340-123-0x000000000C220000-0x000000000C2B6000-memory.dmp

Filesize
600KB

Download
memory/3340-2-0x0000000074EB0000-0x0000000075660000-memory.dmp

Filesize
7.7MB

Download
memory/3340-1-0x0000000000970000-0x0000000000B02000-memory.dmp

Filesize
1.6MB

Download
memory/3340-124-0x00000000013C0000-0x00000000013E6000-memory.dmp

Filesize
152KB

Download
memory/3340-0-0x0000000074EBE000-0x0000000074EBF000-memory.dmp

Filesize
4KB

Download
memory/3340-129-0x0000000001540000-0x000000000154A000-memory.dmp

Filesize
40KB

Download
memory/3340-128-0x0000000001530000-0x000000000153A000-memory.dmp

Filesize
40KB

Download
memory/3340-127-0x000000000B100000-0x000000000B172000-memory.dmp

Filesize
456KB

Download
memory/4052-8890-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8895-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8896-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8897-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8898-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8899-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8900-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8894-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8888-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4052-8889-0x000001E47F990000-0x000001E47F991000-memory.dmp

Filesize
4KB

Download
memory/4712-8845-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8878-0x000000001DB10000-0x000000001DB86000-memory.dmp

Filesize
472KB

Download
memory/4712-378-0x000000000B460000-0x000000000B7B4000-memory.dmp

Filesize
3.3MB

Download
memory/4712-8434-0x0000000005790000-0x00000000057C8000-memory.dmp

Filesize
224KB

Download
memory/4712-8435-0x000000000D2E0000-0x000000000D80C000-memory.dmp

Filesize
5.2MB

Download
memory/4712-8873-0x000000000A220000-0x000000000A306000-memory.dmp

Filesize
920KB

Download
memory/4712-377-0x000000000A540000-0x000000000A562000-memory.dmp

Filesize
136KB

Download
memory/4712-372-0x0000000009AD0000-0x0000000009B82000-memory.dmp

Filesize
712KB

Download
memory/4712-8855-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8858-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/4712-8857-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/4712-8856-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8852-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/4712-8851-0x0000000011490000-0x0000000011616000-memory.dmp

Filesize
1.5MB

Download
memory/4712-8844-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/4712-8871-0x0000000008960000-0x0000000008984000-memory.dmp

Filesize
144KB

Download
memory/4712-8846-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8847-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8848-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8849-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8850-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8843-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/4712-8842-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/4712-8839-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8838-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8840-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-8841-0x00000000012F0000-0x0000000001300000-memory.dmp

Filesize
64KB

Download
memory/4712-367-0x00000000054D0000-0x00000000054D8000-memory.dmp

Filesize
32KB

Download
memory/4712-366-0x0000000005420000-0x00000000054C0000-memory.dmp

Filesize
640KB

Download
memory/4712-365-0x0000000005370000-0x0000000005422000-memory.dmp

Filesize
712KB

Download
memory/4712-355-0x00000000001C0000-0x00000000009C2000-memory.dmp

Filesize
8.0MB

Download
memory/4712-8874-0x0000000009E80000-0x0000000009FDB000-memory.dmp

Filesize
1.4MB

Download
memory/4712-8875-0x0000000009FF0000-0x000000000A066000-memory.dmp

Filesize
472KB

Download
memory/4712-8827-0x0000000005620000-0x0000000005628000-memory.dmp

Filesize
32KB

Download
memory/4712-8826-0x0000000008AE0000-0x0000000008B46000-memory.dmp

Filesize
408KB

Download
memory/4712-8825-0x0000000005570000-0x00000000055AE000-memory.dmp

Filesize
248KB

Download
memory/4712-8876-0x000000000A1A0000-0x000000000A1D2000-memory.dmp

Filesize
200KB

Download
memory/4712-8872-0x000000000A320000-0x000000000A36A000-memory.dmp

Filesize
296KB

Download
memory/4712-8853-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/4712-8854-0x0000000005A30000-0x0000000005A40000-memory.dmp

Filesize
64KB

Download
memory/5172-7695-0x0000000000BA0000-0x0000000000BD5000-memory.dmp

Filesize
212KB

Download
memory/5172-7612-0x000000006B5B0000-0x000000006B7C0000-memory.dmp

Filesize
2.1MB

Download
memory/5172-7542-0x0000000000BA0000-0x0000000000BD5000-memory.dmp

Filesize
212KB

Download
memory/5172-7543-0x000000006B5B0000-0x000000006B7C0000-memory.dmp

Filesize
2.1MB

Download
memory/7228-8930-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8934-0x000000000D3D0000-0x000000000D3E0000-memory.dmp

Filesize
64KB

Download
memory/7228-8932-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8926-0x000000000D3D0000-0x000000000D3E0000-memory.dmp

Filesize
64KB

Download
memory/7228-8927-0x000000000D3D0000-0x000000000D3E0000-memory.dmp

Filesize
64KB

Download
memory/7228-8925-0x000000000CD10000-0x000000000CD20000-memory.dmp

Filesize
64KB

Download
memory/7228-8931-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8929-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8923-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8921-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8933-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8928-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8936-0x000000000D3D0000-0x000000000D3E0000-memory.dmp

Filesize
64KB

Download
memory/7228-8938-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8939-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8937-0x000000000D3D0000-0x000000000D3E0000-memory.dmp

Filesize
64KB

Download
memory/7228-8935-0x000000000CD10000-0x000000000CD20000-memory.dmp

Filesize
64KB

Download
memory/7228-8922-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download
memory/7228-8920-0x000000000B3C0000-0x000000000B714000-memory.dmp

Filesize
3.3MB

Download
memory/7228-8924-0x000000000C930000-0x000000000C940000-memory.dmp

Filesize
64KB

Download