Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    218s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2024, 22:04

General

  • Target

    https://drive.google.com/uc?id=12WBT8qXg0FZyiIfnQfimIrN-sUpoTREP&export=download

Malware Config

Signatures

  • Downloads MZ/PE file
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Modifies registry class 46 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 54 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/uc?id=12WBT8qXg0FZyiIfnQfimIrN-sUpoTREP&export=download
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • NTFS ADS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa0a3046f8,0x7ffa0a304708,0x7ffa0a304718
      2⤵
        PID:228
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:1160
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:5008
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2500 /prefetch:8
          2⤵
            PID:1188
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
            2⤵
              PID:3828
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
              2⤵
                PID:1388
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4192 /prefetch:8
                2⤵
                  PID:4432
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2424 /prefetch:1
                  2⤵
                    PID:2896
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5496 /prefetch:8
                    2⤵
                      PID:1472
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5496 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:932
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
                      2⤵
                        PID:4216
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
                        2⤵
                          PID:2492
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
                          2⤵
                            PID:3080
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
                            2⤵
                              PID:2132
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1
                              2⤵
                                PID:548
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3360 /prefetch:8
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:4952
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
                                2⤵
                                  PID:4536
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
                                  2⤵
                                    PID:4884
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
                                    2⤵
                                      PID:3188
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2120 /prefetch:1
                                      2⤵
                                        PID:3476
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
                                        2⤵
                                          PID:4348
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1936 /prefetch:8
                                          2⤵
                                            PID:2916
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3556 /prefetch:8
                                            2⤵
                                            • Modifies registry class
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:4216
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
                                            2⤵
                                              PID:4188
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
                                              2⤵
                                                PID:3720
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
                                                2⤵
                                                  PID:4936
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
                                                  2⤵
                                                    PID:1892
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
                                                    2⤵
                                                      PID:1972
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
                                                      2⤵
                                                        PID:900
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
                                                        2⤵
                                                          PID:4168
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5640 /prefetch:8
                                                          2⤵
                                                            PID:3140
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
                                                            2⤵
                                                              PID:4536
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6128 /prefetch:8
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:2788
                                                            • C:\Users\Admin\Downloads\7z2407-x64.exe
                                                              "C:\Users\Admin\Downloads\7z2407-x64.exe"
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Drops file in Program Files directory
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:664
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5600 /prefetch:2
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:5192
                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0.7z"
                                                              2⤵
                                                                PID:5340
                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0.7z"
                                                                  3⤵
                                                                  • Checks processor information in registry
                                                                  PID:6028
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
                                                                2⤵
                                                                  PID:6644
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
                                                                  2⤵
                                                                    PID:5668
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3730699907694368609,16321812625606552788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1824 /prefetch:1
                                                                    2⤵
                                                                      PID:5452
                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                    1⤵
                                                                      PID:4352
                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                      1⤵
                                                                        PID:4328
                                                                      • C:\Windows\system32\OpenWith.exe
                                                                        C:\Windows\system32\OpenWith.exe -Embedding
                                                                        1⤵
                                                                        • Modifies registry class
                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:3668
                                                                      • C:\Windows\system32\OpenWith.exe
                                                                        C:\Windows\system32\OpenWith.exe -Embedding
                                                                        1⤵
                                                                        • Modifies registry class
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:3828
                                                                      • C:\Windows\system32\OpenWith.exe
                                                                        C:\Windows\system32\OpenWith.exe -Embedding
                                                                        1⤵
                                                                        • Modifies registry class
                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:2712
                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0.7z"
                                                                          2⤵
                                                                            PID:3856
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0.7z"
                                                                              3⤵
                                                                              • Checks processor information in registry
                                                                              • Modifies registry class
                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              • Suspicious use of SendNotifyMessage
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:2620
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1948 -parentBuildID 20240401114208 -prefsHandle 1860 -prefMapHandle 1852 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {71f05495-540c-4ed5-9372-bfbc5917b26a} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" gpu
                                                                                4⤵
                                                                                  PID:2640
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2408 -parentBuildID 20240401114208 -prefsHandle 2384 -prefMapHandle 2380 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41da0b5f-a87b-48da-84ea-15dabfd167db} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" socket
                                                                                  4⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:4432
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3136 -childID 1 -isForBrowser -prefsHandle 3144 -prefMapHandle 3140 -prefsLen 24741 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {346429b2-594c-44f8-8471-287ffe0c2ed4} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                  4⤵
                                                                                    PID:4660
                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3604 -childID 2 -isForBrowser -prefsHandle 3600 -prefMapHandle 2632 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54c0f4cf-023e-4b84-a26b-faf07388414d} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                    4⤵
                                                                                      PID:1284
                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5012 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 5024 -prefMapHandle 5040 -prefsLen 29090 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0acb8b5a-c25d-4c1b-b329-e615036c380b} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" utility
                                                                                      4⤵
                                                                                      • Checks processor information in registry
                                                                                      PID:5988
                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5576 -childID 3 -isForBrowser -prefsHandle 5476 -prefMapHandle 5568 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc843763-6534-4c13-853c-93ad6034a14c} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                      4⤵
                                                                                        PID:5344
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5588 -childID 4 -isForBrowser -prefsHandle 5544 -prefMapHandle 5532 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {16956cd1-fd05-4e27-98e4-43c5a82e79b7} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                        4⤵
                                                                                          PID:5352
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5916 -childID 5 -isForBrowser -prefsHandle 5376 -prefMapHandle 5360 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6028b3de-eedc-4086-ad77-df0c67efc610} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                          4⤵
                                                                                            PID:5372
                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3292 -childID 6 -isForBrowser -prefsHandle 3068 -prefMapHandle 2940 -prefsLen 28045 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a0123206-27ff-4632-af0c-990cf73e9e44} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                            4⤵
                                                                                              PID:2068
                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6420 -childID 7 -isForBrowser -prefsHandle 6464 -prefMapHandle 6468 -prefsLen 30579 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {788284b9-b59f-47dc-be85-e53c8340f522} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                              4⤵
                                                                                                PID:5128
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6604 -childID 8 -isForBrowser -prefsHandle 6636 -prefMapHandle 6548 -prefsLen 28045 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {57d87290-2144-4789-9b1d-84d3c6f2cc96} 2620 "\\.\pipe\gecko-crash-server-pipe.2620" tab
                                                                                                4⤵
                                                                                                  PID:6180
                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0(1).7z"
                                                                                            1⤵
                                                                                              PID:5724
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\MrsMajor 3.0(1).7z"
                                                                                                2⤵
                                                                                                • Checks processor information in registry
                                                                                                PID:5740
                                                                                            • C:\Windows\System32\rundll32.exe
                                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                              1⤵
                                                                                                PID:6136
                                                                                              • C:\Program Files\7-Zip\7zG.exe
                                                                                                "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap4307:84:7zEvent9079
                                                                                                1⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                PID:5296
                                                                                              • C:\Users\Admin\Downloads\7z2407-x64.exe
                                                                                                "C:\Users\Admin\Downloads\7z2407-x64.exe"
                                                                                                1⤵
                                                                                                • Executes dropped EXE
                                                                                                • Drops file in Program Files directory
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • Modifies registry class
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:4556
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                1⤵
                                                                                                • Enumerates system info in registry
                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                PID:5784
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa11e1cc40,0x7ffa11e1cc4c,0x7ffa11e1cc58
                                                                                                  2⤵
                                                                                                    PID:5796
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1876,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1868 /prefetch:2
                                                                                                    2⤵
                                                                                                      PID:5572
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1992,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2160 /prefetch:3
                                                                                                      2⤵
                                                                                                        PID:5260
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2276,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2256 /prefetch:8
                                                                                                        2⤵
                                                                                                          PID:5868
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3156,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3172 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:6064
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3328,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3424 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:4496
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4436,i,936848571163819245,3201191769829850627,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3604 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5756
                                                                                                            • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                                                              1⤵
                                                                                                                PID:5308
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                1⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                PID:1060
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa11e1cc40,0x7ffa11e1cc4c,0x7ffa11e1cc58
                                                                                                                  2⤵
                                                                                                                    PID:3740
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1996,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1984 /prefetch:2
                                                                                                                    2⤵
                                                                                                                      PID:5012
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1936,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2032 /prefetch:3
                                                                                                                      2⤵
                                                                                                                        PID:5076
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2272,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2280 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:400
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3172,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3236 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:2660
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3180,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3260 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5036
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4584,i,6098003606910778885,16014416754401982161,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4600 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:6888
                                                                                                                            • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                                                                              1⤵
                                                                                                                                PID:6728
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
                                                                                                                                1⤵
                                                                                                                                • Enumerates system info in registry
                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                PID:508
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa0a3046f8,0x7ffa0a304708,0x7ffa0a304718
                                                                                                                                  2⤵
                                                                                                                                    PID:6904
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
                                                                                                                                    2⤵
                                                                                                                                      PID:3984
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
                                                                                                                                      2⤵
                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                      PID:3392
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
                                                                                                                                      2⤵
                                                                                                                                        PID:5652
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6076
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:6092
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3644 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:6300
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:6180
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3528 /prefetch:8
                                                                                                                                                2⤵
                                                                                                                                                  PID:3492
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3528 /prefetch:8
                                                                                                                                                  2⤵
                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                  PID:4964
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4432 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:1608
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4360 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5004
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,14341368729879762124,483211743600802756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:3688
                                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                      1⤵
                                                                                                                                                        PID:5876
                                                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                        1⤵
                                                                                                                                                          PID:4524

                                                                                                                                                        Network

                                                                                                                                                        MITRE ATT&CK Enterprise v15

                                                                                                                                                        Replay Monitor

                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                        Downloads

                                                                                                                                                        • C:\Program Files\7-Zip\7-zip.chm

                                                                                                                                                          Filesize

                                                                                                                                                          117KB

                                                                                                                                                          MD5

                                                                                                                                                          b79894fbee3c882c3efc71ff3d4a21bb

                                                                                                                                                          SHA1

                                                                                                                                                          8bb4fa0e32cc892f8be396dbaa35acef7a53e36e

                                                                                                                                                          SHA256

                                                                                                                                                          2d55ca494a8b6dcc739d84bdd112f5c50d612f8abf409c9fb5f2b5c2c84c37a0

                                                                                                                                                          SHA512

                                                                                                                                                          b66a75ee3831c56967e2c64f8c9ba434f3cd9e4dc4c4fa79580e5ef81e8595863a477ce487921d46891bffcb31c6d45ea332e441c5c26df9a1ee59c0769f32b6

                                                                                                                                                        • C:\Program Files\7-Zip\7-zip.dll

                                                                                                                                                          Filesize

                                                                                                                                                          99KB

                                                                                                                                                          MD5

                                                                                                                                                          8af282b10fd825dc83d827c1d8d23b53

                                                                                                                                                          SHA1

                                                                                                                                                          17c08d9ad0fb1537c7e6cb125ec0acbc72f2b355

                                                                                                                                                          SHA256

                                                                                                                                                          1c0012c9785c3283556ac33a70f77a1bc6914d79218a5c4903b1c174aaa558ca

                                                                                                                                                          SHA512

                                                                                                                                                          cb6811df9597796302d33c5c138b576651a1e1f660717dd79602db669692c18844b87c68f2126d5f56ff584eee3c8710206265465583de9ec9da42a6ed2477f8

                                                                                                                                                        • C:\Program Files\7-Zip\7z.dll

                                                                                                                                                          Filesize

                                                                                                                                                          1.8MB

                                                                                                                                                          MD5

                                                                                                                                                          0009bd5e13766d11a23289734b383cbe

                                                                                                                                                          SHA1

                                                                                                                                                          913784502be52ce33078d75b97a1c1396414cf44

                                                                                                                                                          SHA256

                                                                                                                                                          3691adcefc6da67eedd02a1b1fc7a21894afd83ecf1b6216d303ed55a5f8d129

                                                                                                                                                          SHA512

                                                                                                                                                          d92cd55fcef5b15975c741f645f9c3cc53ae7cd5dffd5d5745adecf098b9957e8ed379e50f3d0855d54598e950b2dbf79094da70d94dfd7fc40bda7163a09b2b

                                                                                                                                                        • C:\Program Files\7-Zip\7zFM.exe

                                                                                                                                                          Filesize

                                                                                                                                                          960KB

                                                                                                                                                          MD5

                                                                                                                                                          79e8ca28aef2f3b1f1484430702b24e1

                                                                                                                                                          SHA1

                                                                                                                                                          76087153a547ce3f03f5b9de217c9b4b11d12f22

                                                                                                                                                          SHA256

                                                                                                                                                          5bc65256b92316f7792e27b0111e208aa6c27628a79a1dec238a4ad1cc9530f7

                                                                                                                                                          SHA512

                                                                                                                                                          b8426b44260a3adcbeaa38c5647e09a891a952774ecd3e6a1b971aef0e4c00d0f2a2def9965ee75be6c6494c3b4e3a84ce28572e376d6c82db0b53ccbbdb1438

                                                                                                                                                        • C:\Program Files\7-Zip\7zG.exe

                                                                                                                                                          Filesize

                                                                                                                                                          691KB

                                                                                                                                                          MD5

                                                                                                                                                          ef0279a7884b9dd13a8a2b6e6f105419

                                                                                                                                                          SHA1

                                                                                                                                                          755af3328261b37426bc495c6c64bba0c18870b2

                                                                                                                                                          SHA256

                                                                                                                                                          0cee5cb3da5dc517d2283d0d5dae69e9be68f1d8d64eca65c81daef9b0b8c69b

                                                                                                                                                          SHA512

                                                                                                                                                          9376a91b8fb3f03d5a777461b1644049eccac4d77b44334d3fe292debed16b4d40601ebe9accb29b386f37eb3ccc2415b92e5cc1735bcce600618734112d6d0e

                                                                                                                                                        • C:\Program Files\7-Zip\History.txt

                                                                                                                                                          Filesize

                                                                                                                                                          6KB

                                                                                                                                                          MD5

                                                                                                                                                          553a02739d516379833451440076f884

                                                                                                                                                          SHA1

                                                                                                                                                          27a428d5eb9f961d6461f94aa3e414f0e3697296

                                                                                                                                                          SHA256

                                                                                                                                                          83b1ae6d3486c2653766a28806ac110c9a0afde17020ca6aa0b7550a2f10e147

                                                                                                                                                          SHA512

                                                                                                                                                          be3cff1e392f4216310b455d73e86b485245ebd9c94bc370233c130e14fc97f92fa1c74567025f506d42eadfc21cc1d7f845d76607bb933a1c654fb7a493796f

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\af.txt

                                                                                                                                                          Filesize

                                                                                                                                                          4KB

                                                                                                                                                          MD5

                                                                                                                                                          df216fae5b13d3c3afe87e405fd34b97

                                                                                                                                                          SHA1

                                                                                                                                                          787ccb4e18fc2f12a6528adbb7d428397fc4678a

                                                                                                                                                          SHA256

                                                                                                                                                          9cf684ea88ea5a479f510750e4089aee60bbb2452aa85285312bafcc02c10a34

                                                                                                                                                          SHA512

                                                                                                                                                          a6eee3d60b88f9676200b40ca9c44cc4e64cf555d9b8788d4fde05e05b8ca5da1d2c7a72114a18358829858d10f2beff094afd3bc12b370460800040537cff68

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\an.txt

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          f16218139e027338a16c3199091d0600

                                                                                                                                                          SHA1

                                                                                                                                                          da48140a4c033eea217e97118f595394195a15d5

                                                                                                                                                          SHA256

                                                                                                                                                          3ab9f7aacd38c4cde814f86bc37eec2b9df8d0dddb95fc1d09a5f5bcb11f0eeb

                                                                                                                                                          SHA512

                                                                                                                                                          b2e99d70d1a7a2a1bfa2ffb61f3ca2d1b18591c4707e4c6c5efb9becdd205d646b3baa0e8cbd28ce297d7830d3dfb8f737266c66e53a83bdbe58b117f8e3ae14

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\ar.txt

                                                                                                                                                          Filesize

                                                                                                                                                          12KB

                                                                                                                                                          MD5

                                                                                                                                                          5747381dc970306051432b18fb2236f2

                                                                                                                                                          SHA1

                                                                                                                                                          20c65850073308e498b63e5937af68b2e21c66f3

                                                                                                                                                          SHA256

                                                                                                                                                          85a26c7b59d6d9932f71518ccd03eceeba42043cb1707719b72bfc348c1c1d72

                                                                                                                                                          SHA512

                                                                                                                                                          3306e15b2c9bb2751b626f6f726de0bcafdc41487ba11fabfcef0a6a798572b29f2ee95384ff347b3b83b310444aaeec23e12bb3ddd7567222a0dd275b0180ff

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\ast.txt

                                                                                                                                                          Filesize

                                                                                                                                                          4KB

                                                                                                                                                          MD5

                                                                                                                                                          1cf6411ff9154a34afb512901ba3ee02

                                                                                                                                                          SHA1

                                                                                                                                                          958f7ff322475f16ca44728349934bc2f7309423

                                                                                                                                                          SHA256

                                                                                                                                                          f5f2174daf36e65790c7f0e9a4496b12e14816dad2ee5b1d48a52307076be35f

                                                                                                                                                          SHA512

                                                                                                                                                          b554c1ab165a6344982533cceed316d7f73b5b94ce483b5dc6fb1f492c6b1914773027d31c35d60ab9408669520ea0785dc0d934d3b2eb4d78570ff7ccbfcf9c

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\az.txt

                                                                                                                                                          Filesize

                                                                                                                                                          9KB

                                                                                                                                                          MD5

                                                                                                                                                          3c297fbe9b1ed5582beabfc112b55523

                                                                                                                                                          SHA1

                                                                                                                                                          c605c20acf399a90ac9937935b4dbdb64fad9c9f

                                                                                                                                                          SHA256

                                                                                                                                                          055ec86aed86abbdbd52d8e99fec6e868d073a6df92c60225add16676994c314

                                                                                                                                                          SHA512

                                                                                                                                                          417984a749471770157c44737ee76bfd3655ef855956be797433dadc2a71e12359454cc817b5c31c6af811067d658429a8706e15625bf4ca9f0db7586f0ae183

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\ba.txt

                                                                                                                                                          Filesize

                                                                                                                                                          10KB

                                                                                                                                                          MD5

                                                                                                                                                          387ff78cf5f524fc44640f3025746145

                                                                                                                                                          SHA1

                                                                                                                                                          8480e549d00003de262b54bc342af66049c43d3b

                                                                                                                                                          SHA256

                                                                                                                                                          8a85c3fcb5f81157490971ee4f5e6b9e4f80be69a802ebed04e6724ce859713f

                                                                                                                                                          SHA512

                                                                                                                                                          7851633ee62c00fa2c68f6f59220a836307e6dde37eae5e5dca3ca254d167e305fe1eb342f93112032dadafe9e9608c97036ac489761f7bdc776a98337152344

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\be.txt

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          b1dd654e9d8c8c1b001f7b3a15d7b5d3

                                                                                                                                                          SHA1

                                                                                                                                                          5a933ae8204163c90c00d97ba0c589f4d9f3f532

                                                                                                                                                          SHA256

                                                                                                                                                          32071222af04465a3d98bb30e253579aa4beceaeb6b21ac7c15b25f46620bf30

                                                                                                                                                          SHA512

                                                                                                                                                          0137900aeb21f53e4af4027ea15eed7696ed0156577fe6194c2b2097f5fb9d201e7e9d52a51a26ae9a426f8137692154d80676f8705f335fed9ae7e0e1d0a10e

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\bg.txt

                                                                                                                                                          Filesize

                                                                                                                                                          17KB

                                                                                                                                                          MD5

                                                                                                                                                          2d0c8197d84a083ef904f8f5608afe46

                                                                                                                                                          SHA1

                                                                                                                                                          5ae918d2bb3e9337538ef204342c5a1d690c7b02

                                                                                                                                                          SHA256

                                                                                                                                                          62c6f410d011a109abecb79caa24d8aeb98b0046d329d611a4d07e66460eef3f

                                                                                                                                                          SHA512

                                                                                                                                                          3243d24bc9fdb59e1964e4be353c10b6e9d4229ef903a5ace9c0cb6e1689403173b11db022ca2244c1ef0f568be95f21915083a8c5b016f07752026d332878a4

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\bn.txt

                                                                                                                                                          Filesize

                                                                                                                                                          14KB

                                                                                                                                                          MD5

                                                                                                                                                          771c8b73a374cb30df4df682d9c40edf

                                                                                                                                                          SHA1

                                                                                                                                                          46aa892c3553bddc159a2c470bd317d1f7b8af2a

                                                                                                                                                          SHA256

                                                                                                                                                          3f55b2ec5033c39c159593c6f5ece667b92f32938b38fcaf58b4b2a98176c1fc

                                                                                                                                                          SHA512

                                                                                                                                                          8dcc9cc13322c4504ee49111e1f674809892900709290e58a4e219053b1f78747780e1266e1f4128c0c526c8c37b1a5d1a452eefba2890e3a5190eebe30657ba

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\br.txt

                                                                                                                                                          Filesize

                                                                                                                                                          4KB

                                                                                                                                                          MD5

                                                                                                                                                          07504a4edab058c2f67c8bcb95c605dd

                                                                                                                                                          SHA1

                                                                                                                                                          3e2ae05865fb474f10b396bfefd453c074f822fa

                                                                                                                                                          SHA256

                                                                                                                                                          432bdb3eaa9953b084ee14eee8fe0abbc1b384cbdd984ccf35f0415d45aabba8

                                                                                                                                                          SHA512

                                                                                                                                                          b3f54d695c2a12e97c93af4df09ce1800b49e40302bec7071a151f13866edfdfafc56f70de07686650a46a8664608d8d3ea38c2939f2f1630ce0bf968d669ccc

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\ca.txt

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          264fb4b86bcfb77de221e063beebd832

                                                                                                                                                          SHA1

                                                                                                                                                          a2eb0a43ea4002c2d8b5817a207eb24296336a20

                                                                                                                                                          SHA256

                                                                                                                                                          07b5c0ac13d62882bf59db528168b6f0ffdf921d5442fae46319e84c90be3203

                                                                                                                                                          SHA512

                                                                                                                                                          8d1a73e902c50fd390b9372483ebd2ec58d588bacf0a3b8c8b9474657c67705b6a284bb16bba4326d314c7a3cc11caf320da38d5acb42e685ed2f8a8b6f411f4

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\co.txt

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          de64842f09051e3af6792930a0456b16

                                                                                                                                                          SHA1

                                                                                                                                                          498b92a35f2a14101183ebe8a22c381610794465

                                                                                                                                                          SHA256

                                                                                                                                                          dcfb95b47a4435eb7504b804da47302d8a62bbe450dadf1a34baea51c7f60c77

                                                                                                                                                          SHA512

                                                                                                                                                          5dabeed739a753fd20807400dfc84f7bf1eb544704660a74afcf4e0205b7c71f1ddcf9f79ac2f7b63579735a38e224685b0125c49568cbde2d9d6add4c7d0ed8

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\cs.txt

                                                                                                                                                          Filesize

                                                                                                                                                          9KB

                                                                                                                                                          MD5

                                                                                                                                                          dbdcfc996677513ea17c583511a5323b

                                                                                                                                                          SHA1

                                                                                                                                                          d655664bc98389ed916bed719203f286bab79d3c

                                                                                                                                                          SHA256

                                                                                                                                                          a6e329f37aca346ef64f2c08cc36568d5383d5b325c0caf758857ed3ff3953f2

                                                                                                                                                          SHA512

                                                                                                                                                          df495a8e8d50d7ec24abb55ce66b7e9b8118af63db3eb2153a321792d809f7559e41de3a9c16800347623ab10292aac2e1761b716cb5080e99a5c8726f7cc113

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\cy.txt

                                                                                                                                                          Filesize

                                                                                                                                                          4KB

                                                                                                                                                          MD5

                                                                                                                                                          6bdf25354b531370754506223b146600

                                                                                                                                                          SHA1

                                                                                                                                                          c2487c59eeeaa5c0bdb19d826fb1e926d691358e

                                                                                                                                                          SHA256

                                                                                                                                                          470eaf5e67f5ead5b8c3ecc1b5b21b29d16c73591eb0047b681660346e25b3fb

                                                                                                                                                          SHA512

                                                                                                                                                          c357b07c176175cc36a85c42d91b0cada79dbfb584bdf57f22a6cb11898f88aecf4392037d5cea3e1bc02df7493bb27b9509226f810f1875105bbc33c6ae3f20

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\da.txt

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          c397e8ac4b966e1476adbce006bb49e4

                                                                                                                                                          SHA1

                                                                                                                                                          3e473e3bc11bd828a1e60225273d47c8121f3f2c

                                                                                                                                                          SHA256

                                                                                                                                                          5ccd481367f7d8c544de6177187aff53f1143ae451ae755ce9ed9b52c5f5d478

                                                                                                                                                          SHA512

                                                                                                                                                          cbbece415d16b9984c82bd8fa4c03dbd1fec58ed04e9ef0a860b74d451d03d1c7e07b23b3e652374a3b9128a7987414074c2a281087f24a77873cc45ec5aadd2

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\de.txt

                                                                                                                                                          Filesize

                                                                                                                                                          9KB

                                                                                                                                                          MD5

                                                                                                                                                          1e30a705da680aaeceaec26dcf2981de

                                                                                                                                                          SHA1

                                                                                                                                                          965c8ed225fb3a914f63164e0df2d5a24255c3d0

                                                                                                                                                          SHA256

                                                                                                                                                          895f76bfa4b1165e4c5a11bdab70a774e7d05d4bbdaec0230f29dcc85d5d3563

                                                                                                                                                          SHA512

                                                                                                                                                          ff96e6578a1ee38db309e72a33f5de7960edcc260ca1f5d899a822c78595cc761fedbdcdd10050378c02d8a36718d76c18c6796498e2574501011f9d988da701

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\el.txt

                                                                                                                                                          Filesize

                                                                                                                                                          17KB

                                                                                                                                                          MD5

                                                                                                                                                          5894a446df1321fbdda52a11ff402295

                                                                                                                                                          SHA1

                                                                                                                                                          a08bf21d20f8ec0fc305c87c71e2c94b98a075a4

                                                                                                                                                          SHA256

                                                                                                                                                          2dd2130f94d31262b12680c080c96b38ad55c1007f9e610ec8473d4bb13d2908

                                                                                                                                                          SHA512

                                                                                                                                                          0a2c3d24e7e9add3ca583c09a63ba130d0088ed36947b9f7b02bb48be4d30ef8dc6b8d788535a941f74a7992566b969adf3bd729665e61bfe22b67075766f8de

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\en.ttt

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          bf2e140e9d30d6c51d372638ba7f4bd9

                                                                                                                                                          SHA1

                                                                                                                                                          a4358379a21a050252d738f6987df587c0bd373d

                                                                                                                                                          SHA256

                                                                                                                                                          c218145bb039e1fd042fb1f5425b634a4bdc1f40b13801e33ed36cfdbda063ed

                                                                                                                                                          SHA512

                                                                                                                                                          b524388f7476c9a43e841746764ff59bdb1f8a1b4299353156081a854ee4435b94b34b1a87c299ec23f8909e0652222595b3177ee0392e3b8c0ff0a818db7f9a

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\eo.txt

                                                                                                                                                          Filesize

                                                                                                                                                          4KB

                                                                                                                                                          MD5

                                                                                                                                                          29caad3b73f6557f0306f4f6c6338235

                                                                                                                                                          SHA1

                                                                                                                                                          d4b3147f23c75de84287ad501e7403e0fce69921

                                                                                                                                                          SHA256

                                                                                                                                                          a6ef5a5a1e28d406fd78079d9cacf819b047a296adc7083d34f2bfb3d071e5af

                                                                                                                                                          SHA512

                                                                                                                                                          77618995d9cf90603c5d4ad60262832d8ad64c91a5e6944efd447a5cc082a381666d986bb294d7982c8721b0113f867b86490ca11bb3d46980132c9e4df1bd92

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\es.txt

                                                                                                                                                          Filesize

                                                                                                                                                          10KB

                                                                                                                                                          MD5

                                                                                                                                                          ed230f9f52ef20a79c4bed8a9fefdf21

                                                                                                                                                          SHA1

                                                                                                                                                          ec0153260b58438ad17faf1a506b22ad0fec1bdc

                                                                                                                                                          SHA256

                                                                                                                                                          7199b362f43e9dca2049c0eeb8b1bb443488ca87e12d7dda0f717b2adbdb7f95

                                                                                                                                                          SHA512

                                                                                                                                                          32f0e954235420a535291cf58b823baacf4a84723231a8636c093061a8c64fcd0952c414fc5bc7080fd8e93f050505d308e834fea44b8ab84802d8449f076bc9

                                                                                                                                                        • C:\Program Files\7-Zip\Lang\et.txt

                                                                                                                                                          Filesize

                                                                                                                                                          6KB

                                                                                                                                                          MD5

                                                                                                                                                          d6a50c4139d0973776fc294ee775c2ac

                                                                                                                                                          SHA1

                                                                                                                                                          1881d68ae10d7eb53291b80bd527a856304078a0

                                                                                                                                                          SHA256

                                                                                                                                                          6b2718882bb47e905f1fdd7b75ece5cc233904203c1407c6f0dcdc5e08e276da

                                                                                                                                                          SHA512

                                                                                                                                                          0fd14b4fd9b613d04ef8747dcd6a47f6f7777ac35c847387c0ea4b217f198aa8ac54ea1698419d4122b808f852e9110d1780edcb61a4057c1e2774aa5382e727

                                                                                                                                                        • C:\Program Files\7-Zip\descript.ion

                                                                                                                                                          Filesize

                                                                                                                                                          366B

                                                                                                                                                          MD5

                                                                                                                                                          eb7e322bdc62614e49ded60e0fb23845

                                                                                                                                                          SHA1

                                                                                                                                                          1bb477811ecdb01457790c46217b61cb53153b75

                                                                                                                                                          SHA256

                                                                                                                                                          1da513f5a4e8018b9ae143884eb3eaf72454b606fd51f2401b7cfd9be4dbbf4f

                                                                                                                                                          SHA512

                                                                                                                                                          8160b581a3f237d87e664d93310f5e85a42df793b3e22390093f9fb9a0a39950be6df2a713b55259fce5d5411d0499886a8039288d9481b4095fabadddbebb60

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                                                                                                                          Filesize

                                                                                                                                                          40B

                                                                                                                                                          MD5

                                                                                                                                                          efc82f8314de2fb0909127cebb38a019

                                                                                                                                                          SHA1

                                                                                                                                                          ffeb52cdf0bffa888270847d4981cc96ba448c14

                                                                                                                                                          SHA256

                                                                                                                                                          9836d53d4914279fb42e48acea940dc78d94b2ba4866e0731a528c65ff131d2a

                                                                                                                                                          SHA512

                                                                                                                                                          89d234d0dbecccda14e5fadb343a7b80a4ce464e270d1e17488b66bf707da13c0f0de30ce9f4a20746c5951c31fe776e9d618712fa6a842749555dd1cc2b0866

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\79dde532-d33b-464a-a753-030bd49b2dab.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          1B

                                                                                                                                                          MD5

                                                                                                                                                          5058f1af8388633f609cadb75a75dc9d

                                                                                                                                                          SHA1

                                                                                                                                                          3a52ce780950d4d969792a2559cd519d7ee8c727

                                                                                                                                                          SHA256

                                                                                                                                                          cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

                                                                                                                                                          SHA512

                                                                                                                                                          0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\1fa83ed3-d987-45db-85a8-0336eeb3c321.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          d826f441e1182351440bd549e9fe8270

                                                                                                                                                          SHA1

                                                                                                                                                          11a7de6564d51f54f37cfb29c7dee5180f67b543

                                                                                                                                                          SHA256

                                                                                                                                                          dec8e009791648f82c12ffe793cdd649ae6c5eb1719aae6a15cb8ceab667b08d

                                                                                                                                                          SHA512

                                                                                                                                                          a662b2c0efcd2c84c17f705674ae7e517f987ab1017e4545ec5953a4ec65564e00bdcccf12142478f186f11fea54a2e22ba40b28f0e527d2dee16c052e5330a6

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          66d66dce066c3022f90488e25105bf59

                                                                                                                                                          SHA1

                                                                                                                                                          fd3613f313849fc2c2a603f42af11ad0ad2246f3

                                                                                                                                                          SHA256

                                                                                                                                                          30c30e8732c060cfd9c25c15832481713e1c5543abf441efb45fe260ea9d09ad

                                                                                                                                                          SHA512

                                                                                                                                                          f2b659a3a52ad17db80a8dee3bc8517a569ed8d47c1278c2f25caa7a2f848072ba86c3b4f7798b7f54a8e2606867d89c3d7c0dd2cb51358fcfb1f50f3c10ad10

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                                                                                                                          Filesize

                                                                                                                                                          2B

                                                                                                                                                          MD5

                                                                                                                                                          d751713988987e9331980363e24189ce

                                                                                                                                                          SHA1

                                                                                                                                                          97d170e1550eee4afc0af065b78cda302a97674c

                                                                                                                                                          SHA256

                                                                                                                                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                                                                                                          SHA512

                                                                                                                                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                                          Filesize

                                                                                                                                                          356B

                                                                                                                                                          MD5

                                                                                                                                                          d1dcdd6ef4da68830ad345d1627e4f5a

                                                                                                                                                          SHA1

                                                                                                                                                          ddc5441607c0cae55b5ad764fed023ee856fa808

                                                                                                                                                          SHA256

                                                                                                                                                          4e71d62429e81b3d516baf36557bda76d8d3373d15a5d4c6da105b92e873a009

                                                                                                                                                          SHA512

                                                                                                                                                          eff507ec07ceb04f4547ee2cb68da3095f15227f5b2bb5054907ad0e37a96e37aae275bac97d39b72a5602788530f1cb6cd89bed7d4d235701a6023ac5e202a0

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                                          Filesize

                                                                                                                                                          356B

                                                                                                                                                          MD5

                                                                                                                                                          7a737901ce5b78a4405e923fc10c76a3

                                                                                                                                                          SHA1

                                                                                                                                                          045a31792f87aff9eba3128ec4c9b2c58d9b098a

                                                                                                                                                          SHA256

                                                                                                                                                          2c7ecfcb8be9be6b9233949b2c950f217dafe7e26babd5b608b04bba0540bfdb

                                                                                                                                                          SHA512

                                                                                                                                                          aac1e535bf9440d79dde94bc267d71c2bfd602347dde250b91f26a003542282417dc548c21d380a808ff72c4c0bc9a5139e3a4eb427adf5575691a37d48d38c8

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          6fb3c161e49f99b72c65afab7a00cf8e

                                                                                                                                                          SHA1

                                                                                                                                                          6548b3fb6d992829c9c46d0b94965b52bacc7baf

                                                                                                                                                          SHA256

                                                                                                                                                          5e9e6265597b74bb060be3e7a3790a494d35d4391a3fe2ee0c11fc81432c6c22

                                                                                                                                                          SHA512

                                                                                                                                                          5fcac83aed7f2ce55df19b4ec5abe9393020623e1e33077908e3c7dd60942e55d16f3f3ed4268a7de877a1015a3ef96133903fc230c46f8f06c9dc95dafa6167

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          21b800006df4e8a38d1e3dff3ba7e3dd

                                                                                                                                                          SHA1

                                                                                                                                                          f3297a13ceb8963022b9b4201ecca09036c218f5

                                                                                                                                                          SHA256

                                                                                                                                                          f2de8e7cd30de24a70acc3a8a12d75a553eb77430bf16f2714a6be6386a7711d

                                                                                                                                                          SHA512

                                                                                                                                                          f359f3a30888584268511a3ebf2e16b3e748dbb40ad1b3c11e3fd33718f6bb32eb5f9ff4b20c10488b2690fecf345b19e5802dfd4047d0353c9d0330a1586d7a

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          cd23a5ca0133540833c55587ee2e00e2

                                                                                                                                                          SHA1

                                                                                                                                                          e7954fc9ac8fd015d9baadbc6ab188ccd1cca8f9

                                                                                                                                                          SHA256

                                                                                                                                                          70b208791f61dd6c069ef1da3eb2d89c077557564930ecb2d70893c4ea7234ea

                                                                                                                                                          SHA512

                                                                                                                                                          51d37f648a55faaf6b1845038da373d328743ca61b409354c22f7688d8bd796a35b27f054280544963df7e1f540459d7f10a18bfb3c4d47358f312f769c23109

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          07b17ba8bd0fd072dcbb038d74431df6

                                                                                                                                                          SHA1

                                                                                                                                                          a323e5d0f278cb92842b0ac3899513ae65ff3a8d

                                                                                                                                                          SHA256

                                                                                                                                                          7679c305a2dd80d2096490c91f57e6d56c05a5e2509ed6ea12690a4ac206b402

                                                                                                                                                          SHA512

                                                                                                                                                          e70f4d379c09ace53134ffee199e98d50076cf2079bf570a759a2e8d0aebab641f8352f6f9795a04c5a3acc6a6bf5953da4dbf0a4873df5edce90de9f4f4aa0c

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          99KB

                                                                                                                                                          MD5

                                                                                                                                                          679ceb9b8ba53c599689218989a864e1

                                                                                                                                                          SHA1

                                                                                                                                                          bb4eff7fa89f2d366e8dd6967803e9015f6c4801

                                                                                                                                                          SHA256

                                                                                                                                                          c610786700915e5104ae4b733e28793c8e5728ef73a57dd1a0f4986023c5dff4

                                                                                                                                                          SHA512

                                                                                                                                                          df085d00cc2bc7e362a342a0f7352098e6de5d65c683fe2c28861c9f13fea31cda663adfbeb7e69ac37a522654d681ba2eeb23594c2a47e7e850ec9ac12b68c2

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          99KB

                                                                                                                                                          MD5

                                                                                                                                                          eead73f6237d84a4d0e435329bb76cac

                                                                                                                                                          SHA1

                                                                                                                                                          c4c0938f649b2be03aa1c4432c1b4a90302707be

                                                                                                                                                          SHA256

                                                                                                                                                          ee45f7c6305078d754948bc33b1bc396757d387476b8b553a3a7b2f8beaf3eeb

                                                                                                                                                          SHA512

                                                                                                                                                          132b3ec109d21b9cb9502308511b8e0f5be49d1b15564072dbd5cc68ea4ce64c0717a4a700efc37047591853211771630494c63d764a6dd9e510fdaa87f6e9cc

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          99KB

                                                                                                                                                          MD5

                                                                                                                                                          f7ae47350b632cd75a98933920fa12a6

                                                                                                                                                          SHA1

                                                                                                                                                          01503fffe599af2544c6cefea24040e85cc0827a

                                                                                                                                                          SHA256

                                                                                                                                                          067ef0b8d323a991e47df4854fca20128fd7efd820edf69d2a9fc3ccf453184f

                                                                                                                                                          SHA512

                                                                                                                                                          cd23016991ebf812e90ab4b436719456f46a5784cb8c0b8a72a93bcc2f37853e2a65c1d098abdddc40e416a4cfe760bcb2e99a2ab9bcd306c86b77fea7f54737

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

                                                                                                                                                          Filesize

                                                                                                                                                          264KB

                                                                                                                                                          MD5

                                                                                                                                                          abdab53bd4993c8adfcf82396046116f

                                                                                                                                                          SHA1

                                                                                                                                                          0f7d65135437be9f81d7290376f4ec41cc3cd6ae

                                                                                                                                                          SHA256

                                                                                                                                                          0117733135995cfbca7d7b1aea85a6ce3c94f4d07a53226628aa8aa7051eced1

                                                                                                                                                          SHA512

                                                                                                                                                          a8398854999a958749e02bcdab64c4455ee63b2f77ce46706f94953fe06528ebca3e2e60cba5e776771bb60e0f02c0a92349bb9b4481e1d141b3dd6afdc8fc99

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                          Filesize

                                                                                                                                                          152B

                                                                                                                                                          MD5

                                                                                                                                                          53bc70ecb115bdbabe67620c416fe9b3

                                                                                                                                                          SHA1

                                                                                                                                                          af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

                                                                                                                                                          SHA256

                                                                                                                                                          b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

                                                                                                                                                          SHA512

                                                                                                                                                          cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                          Filesize

                                                                                                                                                          152B

                                                                                                                                                          MD5

                                                                                                                                                          9f35c8aa47023d2ef22bbeb114a7a7eb

                                                                                                                                                          SHA1

                                                                                                                                                          5a173a4854e3beae6a57b50d2840ac75dae04b75

                                                                                                                                                          SHA256

                                                                                                                                                          b9c64afbb94374a4b43c5c347f4ef6cf6bc3a707a2800895904041d0df7ddd81

                                                                                                                                                          SHA512

                                                                                                                                                          2a2669ecf80b89afd218c8d8b8a17a0edcb45886e3bbad01feef40b59e6c426817bc9af769505093633974c3c334554c681dc8be72dd10085ca6789932953961

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                          Filesize

                                                                                                                                                          152B

                                                                                                                                                          MD5

                                                                                                                                                          e765f3d75e6b0e4a7119c8b14d47d8da

                                                                                                                                                          SHA1

                                                                                                                                                          cc9f7c7826c2e1a129e7d98884926076c3714fc0

                                                                                                                                                          SHA256

                                                                                                                                                          986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

                                                                                                                                                          SHA512

                                                                                                                                                          a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                                                                                          Filesize

                                                                                                                                                          64KB

                                                                                                                                                          MD5

                                                                                                                                                          d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                                          SHA1

                                                                                                                                                          ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                                          SHA256

                                                                                                                                                          34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                                          SHA512

                                                                                                                                                          2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                                                                                                                                          Filesize

                                                                                                                                                          67KB

                                                                                                                                                          MD5

                                                                                                                                                          1d9097f6fd8365c7ed19f621246587eb

                                                                                                                                                          SHA1

                                                                                                                                                          937676f80fd908adc63adb3deb7d0bf4b64ad30e

                                                                                                                                                          SHA256

                                                                                                                                                          a9dc0d556e1592de2aeef8eed47d099481cfb7f37ea3bf1736df764704f39ddf

                                                                                                                                                          SHA512

                                                                                                                                                          251bf8a2baf71cde89873b26ee77fe89586daf2a2a913bd8383b1b4eca391fdd28aea6396de3fdff029c6d188bf9bb5f169954e5445da2933664e70acd79f4e3

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                                                                                                                                          Filesize

                                                                                                                                                          41KB

                                                                                                                                                          MD5

                                                                                                                                                          ed3c7f5755bf251bd20441f4dc65f5bf

                                                                                                                                                          SHA1

                                                                                                                                                          3919a57831d103837e0cc158182ac10b903942c5

                                                                                                                                                          SHA256

                                                                                                                                                          55cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d

                                                                                                                                                          SHA512

                                                                                                                                                          c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                                                                                          Filesize

                                                                                                                                                          19KB

                                                                                                                                                          MD5

                                                                                                                                                          2e86a72f4e82614cd4842950d2e0a716

                                                                                                                                                          SHA1

                                                                                                                                                          d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                                                          SHA256

                                                                                                                                                          c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                                                          SHA512

                                                                                                                                                          7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                                                                                          Filesize

                                                                                                                                                          63KB

                                                                                                                                                          MD5

                                                                                                                                                          710d7637cc7e21b62fd3efe6aba1fd27

                                                                                                                                                          SHA1

                                                                                                                                                          8645d6b137064c7b38e10c736724e17787db6cf3

                                                                                                                                                          SHA256

                                                                                                                                                          c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

                                                                                                                                                          SHA512

                                                                                                                                                          19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                                                                                                                                          Filesize

                                                                                                                                                          88KB

                                                                                                                                                          MD5

                                                                                                                                                          b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                                                                                          SHA1

                                                                                                                                                          386ba241790252df01a6a028b3238de2f995a559

                                                                                                                                                          SHA256

                                                                                                                                                          b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                                                                                          SHA512

                                                                                                                                                          546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                                                                                                                                          Filesize

                                                                                                                                                          1.2MB

                                                                                                                                                          MD5

                                                                                                                                                          027a77a637cb439865b2008d68867e99

                                                                                                                                                          SHA1

                                                                                                                                                          ba448ff5be0d69dbe0889237693371f4f0a2425e

                                                                                                                                                          SHA256

                                                                                                                                                          6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd

                                                                                                                                                          SHA512

                                                                                                                                                          66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                          Filesize

                                                                                                                                                          2KB

                                                                                                                                                          MD5

                                                                                                                                                          3d315c43d686d8b5176f0a2b6025c8db

                                                                                                                                                          SHA1

                                                                                                                                                          d242b66820a456265edffe40523b7073877076ca

                                                                                                                                                          SHA256

                                                                                                                                                          199a493e122d17f924400e37b677d3d4e9a2fd6fed9c3c24428038f95e23017b

                                                                                                                                                          SHA512

                                                                                                                                                          0de99a47e75eb2dfcb5fccb6d88a0717a1cb4520f9c912fe233f46c3dc487100cf35dcfb1e9fce83957b90d497d2860caabfdbbb073bd276fe20241d2ca68d31

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          96935cc40ad5d3ade58797f0a7da12dd

                                                                                                                                                          SHA1

                                                                                                                                                          c25f3c11d0c5a8515aa67d6551ebd6741bac4a74

                                                                                                                                                          SHA256

                                                                                                                                                          8ba201152d9a6e077ac23b38e01fcbfef05d903222c1cb29fef535dfcdffebd6

                                                                                                                                                          SHA512

                                                                                                                                                          1a42ce82a94039efdbc9cbdb9e4cbb074ee277884e8c7e9ee0b1a58447329abd5b48a47b84df476f0e146a4da73ff8e0fbb0902cb2264acafcd1e0b065e22552

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          899622c66eb92e8637afd7195e6da8e5

                                                                                                                                                          SHA1

                                                                                                                                                          663fb20c62b931678c579d088f58772086b3087d

                                                                                                                                                          SHA256

                                                                                                                                                          ffd9d514719a99f2a7fdda5c43eae17b9e7643094739aa736a04f42c6a23eaeb

                                                                                                                                                          SHA512

                                                                                                                                                          9588a7889d4fb617195ed10f964de3884384da823a28dddeacf6492654dca96a16a30aaf333ec84c240fb6e791f52d80aba00a3fc881b7282cf0e67abc68d00a

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          2bf6bb7b01d67ff1718467f65dd0d01d

                                                                                                                                                          SHA1

                                                                                                                                                          a394b4aeb1c0d234a74f73c7b08e01dd03a50228

                                                                                                                                                          SHA256

                                                                                                                                                          948f3a7b31d2440016b82590f85d5cabf1effe7679df86ade922fc763bb963c1

                                                                                                                                                          SHA512

                                                                                                                                                          8ccfe12102ae47e549523efd60276f2c0a9123e4cb12cdcd2d90b6b4fd520d05491a8e1367a9b51683cd73ee7dc0680a3f851ae31d22761732f6e5885d09cdc5

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                          Filesize

                                                                                                                                                          2KB

                                                                                                                                                          MD5

                                                                                                                                                          d78da584a53aba6e6d90348d9b6de8a9

                                                                                                                                                          SHA1

                                                                                                                                                          ce58e2fa117e21b363dd283c5b301e4131eac131

                                                                                                                                                          SHA256

                                                                                                                                                          120d04438acdb3bfa90a48f2514cba075917e520c5638016db61458685e30383

                                                                                                                                                          SHA512

                                                                                                                                                          bfdaacbe33254d5b348bbdd170d459c9d2c53b6816a424ceca5141f3021732178e3ab5290f5fba4fd9231ccf8fedc62d3c03c3fd38811e02c79a1e8b3949a36d

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          a2273339e05cd9979aefbb65f58f5361

                                                                                                                                                          SHA1

                                                                                                                                                          adc54c5ff04cc03279334c0d4712d098a58b9405

                                                                                                                                                          SHA256

                                                                                                                                                          17bf0e8bdea068171fdd4abc4a07686a834a9fe55a35a84241a03bb8d2fdc574

                                                                                                                                                          SHA512

                                                                                                                                                          09d0eea8ab1c2053e3f458f86ed64bb734f82afc47031981ac193e057a2add8e2aab1f82bf995077c01baa52d320fdf7930ab565f91177c6711d9d8fe0794048

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          6KB

                                                                                                                                                          MD5

                                                                                                                                                          edc371f445ea769b62a5f1adfa710592

                                                                                                                                                          SHA1

                                                                                                                                                          f866c7222aa0e96207359c71f053c66f1e3b53d7

                                                                                                                                                          SHA256

                                                                                                                                                          e15592852c39886e8df6c381ac6ffa5909943067dad22fae86ee03904559393d

                                                                                                                                                          SHA512

                                                                                                                                                          292b3d9fa1d1e67254da3427cf8ea8d5e24ea3732d587c8843db00de7265f6f81ee145d430d25f98c3cf902ee393efc69dcc7f83f9b761a411486e5a0742d6fe

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          71e487e6726d0ad2979ac6403ec7d5e2

                                                                                                                                                          SHA1

                                                                                                                                                          e081b6191ddee4d0ae88cd0f7c9241ea37353f06

                                                                                                                                                          SHA256

                                                                                                                                                          ca17fdd8dc5d1c48b0e316c00031f4b71d11acec5515edffaa56493b6c497252

                                                                                                                                                          SHA512

                                                                                                                                                          adf4822e4d37c1cde9f4379527fead6a3b8b0d03c61b5a3cd7ec4ba23936c5fffb33dbbda10e3da73f1470902268d6139f832f9a7cac6f68abf909c17001a7a0

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          1d5bb6867a73ca9fc7cac63b26c06c3c

                                                                                                                                                          SHA1

                                                                                                                                                          776831520b7f6419bb7d84ad7a87444c2e6362ae

                                                                                                                                                          SHA256

                                                                                                                                                          1bc42d9cf60dac20890fc85d220815eaa03947b3302af6efc5f43fbce65124ab

                                                                                                                                                          SHA512

                                                                                                                                                          53cfdee1b155da92d7861249fab85ca95b05716ed3d50f5de753ff1575deba0e29afd81b0f3a6b0c4e6f62c1dab69d06c020fe27595d4d848b2b848d536dc92c

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          8d3a5d2b57e048aa1510bc3d97cb9c4d

                                                                                                                                                          SHA1

                                                                                                                                                          2d47a6464eb32b93b0908b8c80f8807d59c7f68c

                                                                                                                                                          SHA256

                                                                                                                                                          eb86fe02221a598868cb6cd11df0a15e8598f51eaf0d204795c142e7aae219de

                                                                                                                                                          SHA512

                                                                                                                                                          bd8d6822632843a4d80c1824d48b871716a95f0028d83f56aab970bc66042deaf1c3e94fb50856ef2610712d91427071f4e8353158f3f8ff89b333a5bbc22743

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          7KB

                                                                                                                                                          MD5

                                                                                                                                                          6bcc8e3e8d82b4044a597a9545f7a27c

                                                                                                                                                          SHA1

                                                                                                                                                          aa06205acbac4ff8aed519b93538e3033e917d04

                                                                                                                                                          SHA256

                                                                                                                                                          45b3ec85e5a21779b725faa999c3025ef5a64457fbd9ad80fe96bfe84947379e

                                                                                                                                                          SHA512

                                                                                                                                                          aac3bd4dbe4d9d8d506b63a8640e28dd81eb2e1a445986fe3f3937162b06e9d5d1a9aa0909b7b23f211b06c158a9279e6e671e4f763628359e66d7e746f4f053

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          48bcb674008be711b08767417a334341

                                                                                                                                                          SHA1

                                                                                                                                                          ede7b55075392ff0b931110944f30ce8b34e0cc7

                                                                                                                                                          SHA256

                                                                                                                                                          720358676e72195c07a3acecde75053b752a3b8dedd3cd80f1bc317079a3adb6

                                                                                                                                                          SHA512

                                                                                                                                                          40f5ced5089a58f24f0fe33bc24f96aa613f16380b15962af47415d13eb745dfc38aac74fec962b66f6db3f44f1cacc23cfc4cd2102afd52edaeba3b73744c77

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          6KB

                                                                                                                                                          MD5

                                                                                                                                                          a0369cd1253c40008033eafdfe9cbd24

                                                                                                                                                          SHA1

                                                                                                                                                          f14b5a19c5591f830f4ecf0136b3ada566b06c4d

                                                                                                                                                          SHA256

                                                                                                                                                          32b9582c1de84500af58acb4da75962eeb6add58c339c265bc77c34e1a4b1371

                                                                                                                                                          SHA512

                                                                                                                                                          c963f90c646997f8da5b93d49f8175c16ac47d78e76a04e2673849588f43b39abaa435ce99c5cde697c67e90f17695e948e59b635615f498f89a753b6e4bd6f4

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                          Filesize

                                                                                                                                                          6KB

                                                                                                                                                          MD5

                                                                                                                                                          3eeb8a28ef308a4d0280161acb09d282

                                                                                                                                                          SHA1

                                                                                                                                                          bd0fa8ca0553dc0ea2fd77e004821f8878e673c9

                                                                                                                                                          SHA256

                                                                                                                                                          23bca56bc726dba978583b7bab6790724fa66d95445db73b8db14f3c74536e16

                                                                                                                                                          SHA512

                                                                                                                                                          c6eaf16cb9873f5fb7f720799275a91c1bf91f81ca85d79f6784bf014338ee973ac98528de0d0180b278dcb38c8fc2fc97f3cfb1f33aff9ac44b1ef715cf359f

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                          Filesize

                                                                                                                                                          96B

                                                                                                                                                          MD5

                                                                                                                                                          d380950979b24912e4a0df861c5535d2

                                                                                                                                                          SHA1

                                                                                                                                                          89a123ba7614c38cf475d415bfa9ee1922425ebb

                                                                                                                                                          SHA256

                                                                                                                                                          a10f803f49cbf8289e9f93dd79e496f8c40cf4655b851d2e11c675716857f6d9

                                                                                                                                                          SHA512

                                                                                                                                                          947cb7018bd3f1eef1bc9fbd379d04e7537fabcb63b47c7afbb29448c8ef5e698ba48a931c6944fd53da85eac02f43a5e7b84fe83364151db55c0dffdd4889ad

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a8f9f.TMP

                                                                                                                                                          Filesize

                                                                                                                                                          48B

                                                                                                                                                          MD5

                                                                                                                                                          98d836f2e724e65528e02e092310c7b5

                                                                                                                                                          SHA1

                                                                                                                                                          f1216ce0d196135f35eb9a912ba8cb80bc25bd95

                                                                                                                                                          SHA256

                                                                                                                                                          b37958931f87eaf0dfe4956584f0e4bafb27eed25fd2b2c49a3efc47a35d0249

                                                                                                                                                          SHA512

                                                                                                                                                          45e7fb083f6576cc2dc846bcd2085f8af879cbe8f2fe2a646a1514190254ab4df5d5b2277e9b8fef551e40a5828594878e002198d5d4167bd1288616324b1601

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          7e34d6b544244fb65063512b6397c292

                                                                                                                                                          SHA1

                                                                                                                                                          5e136578c8db99150ed8ce506ddb5b60f25895a8

                                                                                                                                                          SHA256

                                                                                                                                                          98d442ab06099df2128e35224da55e2ca6e3dbaf267669f5229d801a5af90362

                                                                                                                                                          SHA512

                                                                                                                                                          2645a1fca91bc8b036710f4c14b486d7963cfbcad13f6372d7af0e652199ca53013f40f8016640cbe59b02e31073e05bd5ce94a0c1b951daceee686bc235ddbe

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                          Filesize

                                                                                                                                                          873B

                                                                                                                                                          MD5

                                                                                                                                                          e378e6ed0e413d0e1b05de25a940c1ca

                                                                                                                                                          SHA1

                                                                                                                                                          6f1a1f82b71afaa3553499fca502bbd707fa3e2c

                                                                                                                                                          SHA256

                                                                                                                                                          913933fa3b69f070833900a5726786009f329b1c0a714acd639285dde9c22131

                                                                                                                                                          SHA512

                                                                                                                                                          c475a067c3e654029812ec310d7919ceace9ec58a6adb01ea960c6826d50c12fe69b939a3db9cf9ab611d84399dae7ee839c714697d65b66662841bc28135e1c

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                          Filesize

                                                                                                                                                          706B

                                                                                                                                                          MD5

                                                                                                                                                          4740a32a30ab5e53d479c68d0c58369c

                                                                                                                                                          SHA1

                                                                                                                                                          b6de23684e8a23e3069302340a93091f5b907851

                                                                                                                                                          SHA256

                                                                                                                                                          c9cdc070482abf60090ea0a38cb59111ef6b64e15d29fedcb4b06f79f07be09e

                                                                                                                                                          SHA512

                                                                                                                                                          420a76b0fcb6eb03560beafdf83ec20f50ecdb6b69aeebed2e2dc29f2cb323652091065ae880e0afb026e8a8f26a62033910fb37d397fb51f60fe432ff2a4ed2

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe586c71.TMP

                                                                                                                                                          Filesize

                                                                                                                                                          204B

                                                                                                                                                          MD5

                                                                                                                                                          cf9ccf4f16ac78a1a8c6c19054307b03

                                                                                                                                                          SHA1

                                                                                                                                                          0f12a1a44f2ed91e2b9ecc45388adb6877f2d530

                                                                                                                                                          SHA256

                                                                                                                                                          c62a4446facb0a4856f022889cf5d8eada8afc74bf245fd1056579938ad74cd1

                                                                                                                                                          SHA512

                                                                                                                                                          5127d769fd35eaf9121705fd2dec5f344498ba8ca96d4166d8764b8e274b303489bcd35fa83821c91692de1e945a3ad0280497a9788f3a5cca4093a7b86996ad

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                                          Filesize

                                                                                                                                                          16B

                                                                                                                                                          MD5

                                                                                                                                                          aefd77f47fb84fae5ea194496b44c67a

                                                                                                                                                          SHA1

                                                                                                                                                          dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                                                                                                                          SHA256

                                                                                                                                                          4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                                                                                                                          SHA512

                                                                                                                                                          b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                                          Filesize

                                                                                                                                                          16B

                                                                                                                                                          MD5

                                                                                                                                                          6752a1d65b201c13b62ea44016eb221f

                                                                                                                                                          SHA1

                                                                                                                                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                                          SHA256

                                                                                                                                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                                          SHA512

                                                                                                                                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          3ea461fb9eb2f5f291f916779c178024

                                                                                                                                                          SHA1

                                                                                                                                                          721daa590d9c969a4420245e2ad7f300fb20e404

                                                                                                                                                          SHA256

                                                                                                                                                          7623db9006e1a610d4c98a8be8d43c236acc1fbfa95deed47e4dc6148637e3e2

                                                                                                                                                          SHA512

                                                                                                                                                          e8f669838730fb50f5236cee06a2b67f1f6efe06fe1342c51a042c264309062eebde4f7ebaa3a6b4b5da4290d2b3f72daa5efa9e45d2ddd301b6eb0f3e755dff

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          10KB

                                                                                                                                                          MD5

                                                                                                                                                          9eab571e4515c431a88f352e92bd64ad

                                                                                                                                                          SHA1

                                                                                                                                                          1a170d32848cb409419751731b1cc66c43287a4a

                                                                                                                                                          SHA256

                                                                                                                                                          0a13413f680878390e5892fdc462bb970f6ac310f269a53119b59b410be102a6

                                                                                                                                                          SHA512

                                                                                                                                                          0aa92d1f5b35c88027b0a3a9d11ed4698e70af36d4e36e1a21bd88b6ff3369de67decf34f89781893b4ac66f68f74208470d5bf42da2a2f90b7221f52343f86c

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          10KB

                                                                                                                                                          MD5

                                                                                                                                                          6abaf98821d1de386a7e2f3f9aaa8e3d

                                                                                                                                                          SHA1

                                                                                                                                                          47b4ec82cb5684ff3691c85ee6fabf9f46937797

                                                                                                                                                          SHA256

                                                                                                                                                          df6d0234ab8818d9e500754648447e23037580aa54f44d06cfd0ade012467cbe

                                                                                                                                                          SHA512

                                                                                                                                                          f3776c83ada52358c58f2b7052ca6e962cd674d4f7b436859932f8d2e7f6c99c50340002cfdd60fa57bbff832c25d0016ea41b4e2c2d7e84327f6fbdb265ae25

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          f937001378686eb667e0c58e94bff2a4

                                                                                                                                                          SHA1

                                                                                                                                                          2240da27327ee302ff40aa122a0e74609ccd0904

                                                                                                                                                          SHA256

                                                                                                                                                          77332d5b7a5c10b686a671b456415e897980c8f296c5b854d631255ab3d55033

                                                                                                                                                          SHA512

                                                                                                                                                          81103baba23c17f66d94c54606d4bd0287be6a5e98e5872fc6a4d3275b1f74595085188a808397ec743651c9260fa149d42a3f8072888ec54e24190bdefbe631

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          320fd15576749d2818ef999b6ffd98c4

                                                                                                                                                          SHA1

                                                                                                                                                          438840f7db73640e39335b883cc49d1e2e9f6404

                                                                                                                                                          SHA256

                                                                                                                                                          f079e9f301fb81fb6ace7137465bf28206bcbe31657a157696756891ce0f8a21

                                                                                                                                                          SHA512

                                                                                                                                                          3e2d5707912d77cdfa996d028e78a997d1cad5042af88949a953e5a656c382a027a56b8712dbf7a1e60d781850ad47bac8d08fa86b566e88e6371c6e0e1927e0

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bxumog7h.default-release\activity-stream.discovery_stream.json.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          18KB

                                                                                                                                                          MD5

                                                                                                                                                          eb71932ef796e9e3c3d0bedbafda3bd3

                                                                                                                                                          SHA1

                                                                                                                                                          48d1eed1ab929fcefa710681662e1299708f53b2

                                                                                                                                                          SHA256

                                                                                                                                                          2cbc0670a4ba9fe551f4ff07d4e18989b8ee56752f18adb61804049bfc3f18df

                                                                                                                                                          SHA512

                                                                                                                                                          2ae44972c85610d58b45e1765a3bffeae0531dfb07108928d331f1ffa89edf4cdcec08e4e8bf73727627824a9af4a141813cf289e43bbfb949b172e1ea72b44a

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bxumog7h.default-release\cache2\entries\9357B92D7A82DC731CBB46EBC4F197AB314C7C11

                                                                                                                                                          Filesize

                                                                                                                                                          218KB

                                                                                                                                                          MD5

                                                                                                                                                          ced984ad750dcecc581db557a8747b58

                                                                                                                                                          SHA1

                                                                                                                                                          9c095ea70f7c23e11e94c35330fdaf5bc6555e2f

                                                                                                                                                          SHA256

                                                                                                                                                          8c01b00891f593ee038e70b62aac93ecf460fc43be0331f24fd52f714736804d

                                                                                                                                                          SHA512

                                                                                                                                                          0b91493f2ce0aea4c55e060661ef63f2c04e67629d650eca0a7298d6a1cd98b43934ca788eecd3efa3a43d4b4ced6407968f2233a036f805dcc95d6f2f916277

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\tmpaddon

                                                                                                                                                          Filesize

                                                                                                                                                          479KB

                                                                                                                                                          MD5

                                                                                                                                                          09372174e83dbbf696ee732fd2e875bb

                                                                                                                                                          SHA1

                                                                                                                                                          ba360186ba650a769f9303f48b7200fb5eaccee1

                                                                                                                                                          SHA256

                                                                                                                                                          c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

                                                                                                                                                          SHA512

                                                                                                                                                          b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

                                                                                                                                                          Filesize

                                                                                                                                                          13.8MB

                                                                                                                                                          MD5

                                                                                                                                                          0a8747a2ac9ac08ae9508f36c6d75692

                                                                                                                                                          SHA1

                                                                                                                                                          b287a96fd6cc12433adb42193dfe06111c38eaf0

                                                                                                                                                          SHA256

                                                                                                                                                          32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

                                                                                                                                                          SHA512

                                                                                                                                                          59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\AlternateServices.bin

                                                                                                                                                          Filesize

                                                                                                                                                          8KB

                                                                                                                                                          MD5

                                                                                                                                                          3340e9d9c005163a447643bac55c9ae2

                                                                                                                                                          SHA1

                                                                                                                                                          307c573561eb69435e399ce976211adbeb71baf4

                                                                                                                                                          SHA256

                                                                                                                                                          cffbbab89cc3d275f0d92616e90407f4095195733c744e2d47860557501c260e

                                                                                                                                                          SHA512

                                                                                                                                                          a734cb5ca4338765969d573458cb7b753d37c1a78ee300b39821d5235461f6620d7b404ca60885e75138ca68205470cfdb952b07c997fed93e971c1d3833666b

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\db\data.safe.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          30KB

                                                                                                                                                          MD5

                                                                                                                                                          64149456adafe3da1f32255b5a5406d3

                                                                                                                                                          SHA1

                                                                                                                                                          ae4baca3eeb16c45ecafa60cd3272450163047a9

                                                                                                                                                          SHA256

                                                                                                                                                          efd506ef8de5fbf8f5c85d899450c0b7dcc7f148a29a0254623942488e92e646

                                                                                                                                                          SHA512

                                                                                                                                                          8bff7c10c16293a97bde94eb430740512c142d2fb634862aae5dc09891551f99eb534ee2b301c8643f0ed253737d0a50b96101b3a7d7a07d12a759ccabf974c0

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\db\data.safe.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          21KB

                                                                                                                                                          MD5

                                                                                                                                                          120d4061c65dbe45f21489e4c63ea36f

                                                                                                                                                          SHA1

                                                                                                                                                          48ff836f89db6da0e930689ff3c6daccbe177fc1

                                                                                                                                                          SHA256

                                                                                                                                                          2b356a30fd9550641d2c3a54134d2ea9bb0b8bc12ea1ff0e7f4c220dd6b88880

                                                                                                                                                          SHA512

                                                                                                                                                          ba83269076d1eb67d6f2616ab9169ee38e49cfcefa2b5e9eb0925b8d9f1c4a5efef0577bdf25e9ad6edf774eecaf3fcc44e42675d9badad0e8afee5f2d1a3073

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\db\data.safe.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          23KB

                                                                                                                                                          MD5

                                                                                                                                                          cfa1b60ba0e843cd44d06e8d7535730f

                                                                                                                                                          SHA1

                                                                                                                                                          a33a31a48b503744efc4361f4d015e8d5de3716c

                                                                                                                                                          SHA256

                                                                                                                                                          303ddad672ecd175a515eea47f2a66ae9a8d42f12c297d9518173a0f9af8a4eb

                                                                                                                                                          SHA512

                                                                                                                                                          a65061b878dc23fc190ca1b548a1a39b0b54a5f843175b83f7534fcee5eed48346e2235839b0c2d85b3de6ed5330c7702dbcf0890775bf02078f6e4aeafe4a85

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\db\data.safe.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          22KB

                                                                                                                                                          MD5

                                                                                                                                                          fad141893aaf5a56b3d9ecfeb1dbba59

                                                                                                                                                          SHA1

                                                                                                                                                          30671efce058e450f9b92cdc21cd6dd3dd192754

                                                                                                                                                          SHA256

                                                                                                                                                          dc42533fde54f34c61ce9fb46e3378a7bd2787579109e8d8aa5df5172789b06a

                                                                                                                                                          SHA512

                                                                                                                                                          e1b171ea34ce93ec998eef7f918518dc69ee8deec27faa471a493cc5105e18b54152426764af1f2919e330b318d59d692dbdcd11f0ba5d45035b2adc3e175cb4

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\pending_pings\3c57779c-dd98-4b41-9034-b62c3a840c56

                                                                                                                                                          Filesize

                                                                                                                                                          982B

                                                                                                                                                          MD5

                                                                                                                                                          082f8fd622c5845e8062d80b8333112d

                                                                                                                                                          SHA1

                                                                                                                                                          2ed72dd83194b72101a383d0d3f65b059c927800

                                                                                                                                                          SHA256

                                                                                                                                                          24daca493c23922464284b71f2a36ab031e3ed97e111d608c9f5d5fb7ee07ed7

                                                                                                                                                          SHA512

                                                                                                                                                          e10832025b87ed179feb94a21180d6537936fb1d799bb5d44543a4b46467e09e47a6a19d9df62a95deb752e4db6084aae4869aae3c2ac7f00d4d8278df02c8b0

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\datareporting\glean\pending_pings\ebcbc08d-635f-4987-96a6-fa3e08628cfc

                                                                                                                                                          Filesize

                                                                                                                                                          659B

                                                                                                                                                          MD5

                                                                                                                                                          441333f0a48abf69e1347c63f97648f5

                                                                                                                                                          SHA1

                                                                                                                                                          fa4d4535443a74a6a098dbaf75ffeafb88ae0a3c

                                                                                                                                                          SHA256

                                                                                                                                                          4a6661a22f4dc7b90dd5a01fe82b0ea625950aa4c3d2f0d0ea183b28ed914cff

                                                                                                                                                          SHA512

                                                                                                                                                          96dd250558d088a59d3d68c3a30c7799d8f1d8a857fc479b452566b8237d988982f826fbbc5e10543a28c372f491a8e61cdb06d1b6975c87ba399d6f83538d32

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

                                                                                                                                                          Filesize

                                                                                                                                                          1.1MB

                                                                                                                                                          MD5

                                                                                                                                                          842039753bf41fa5e11b3a1383061a87

                                                                                                                                                          SHA1

                                                                                                                                                          3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

                                                                                                                                                          SHA256

                                                                                                                                                          d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

                                                                                                                                                          SHA512

                                                                                                                                                          d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

                                                                                                                                                          Filesize

                                                                                                                                                          116B

                                                                                                                                                          MD5

                                                                                                                                                          2a461e9eb87fd1955cea740a3444ee7a

                                                                                                                                                          SHA1

                                                                                                                                                          b10755914c713f5a4677494dbe8a686ed458c3c5

                                                                                                                                                          SHA256

                                                                                                                                                          4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

                                                                                                                                                          SHA512

                                                                                                                                                          34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

                                                                                                                                                          Filesize

                                                                                                                                                          372B

                                                                                                                                                          MD5

                                                                                                                                                          bf957ad58b55f64219ab3f793e374316

                                                                                                                                                          SHA1

                                                                                                                                                          a11adc9d7f2c28e04d9b35e23b7616d0527118a1

                                                                                                                                                          SHA256

                                                                                                                                                          bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

                                                                                                                                                          SHA512

                                                                                                                                                          79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

                                                                                                                                                          Filesize

                                                                                                                                                          17.8MB

                                                                                                                                                          MD5

                                                                                                                                                          daf7ef3acccab478aaa7d6dc1c60f865

                                                                                                                                                          SHA1

                                                                                                                                                          f8246162b97ce4a945feced27b6ea114366ff2ad

                                                                                                                                                          SHA256

                                                                                                                                                          bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

                                                                                                                                                          SHA512

                                                                                                                                                          5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\prefs-1.js

                                                                                                                                                          Filesize

                                                                                                                                                          12KB

                                                                                                                                                          MD5

                                                                                                                                                          f3d4bd88b6a7aba4bf3b87f399fee20e

                                                                                                                                                          SHA1

                                                                                                                                                          3a8f03a613bc46fe2832a8717863fa42127357d1

                                                                                                                                                          SHA256

                                                                                                                                                          fb66f9adfa4ceebca5f9ebd0dbd3b239e2d38c4e326f60e0c20f3ba34fcffeff

                                                                                                                                                          SHA512

                                                                                                                                                          45787311b794ca608bc0edde9827dd9fefbc4714eda5a3abff12e29836dd16e9c0535cd95e18a5c0a47f68a03183878c48888b9192517950edef079b1ad4a825

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\prefs.js

                                                                                                                                                          Filesize

                                                                                                                                                          11KB

                                                                                                                                                          MD5

                                                                                                                                                          c3195e224b08d67f0a8bb04ede265075

                                                                                                                                                          SHA1

                                                                                                                                                          fc7be170c2fff20076209cafa706d34ff69f48c7

                                                                                                                                                          SHA256

                                                                                                                                                          d0f260396c591da960d7fd9362a7d6286acb72e04d48edd189a28b1ee161d632

                                                                                                                                                          SHA512

                                                                                                                                                          ef794762d2ae7c82f8f3e167ab8492c9054e52ec1fa33494e87755187072c5e911dc22aecfcc43b6ce602265b00fa908c6533bac6e34f3041e1b583dd1a73971

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\sessionCheckpoints.json.tmp

                                                                                                                                                          Filesize

                                                                                                                                                          259B

                                                                                                                                                          MD5

                                                                                                                                                          c8dc58eff0c029d381a67f5dca34a913

                                                                                                                                                          SHA1

                                                                                                                                                          3576807e793473bcbd3cf7d664b83948e3ec8f2d

                                                                                                                                                          SHA256

                                                                                                                                                          4c22e8a42797f14510228f9f4de8eea45c526228a869837bd43c0540092e5f17

                                                                                                                                                          SHA512

                                                                                                                                                          b8f7c4150326f617b63d6bc72953160804a3749f6dec0492779f6c72b3b09c8d1bd58f47d499205c9a0e716f55fe5f1503d7676a4c85d31d1c1e456898af77b4

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\sessionstore-backups\recovery.baklz4

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          188406055b32e07dbbbc6ca13ce9134c

                                                                                                                                                          SHA1

                                                                                                                                                          23a0df07ee03f361266dc685234cfc5030a1f0db

                                                                                                                                                          SHA256

                                                                                                                                                          f9a2850e811d610634baea84570aff98bdef3bcbd7cf4a5def1bb150601b40b6

                                                                                                                                                          SHA512

                                                                                                                                                          4dc18e0b322084d55067fcfffd450a4be2f65f10105425c2a375032305bc018e9139d884d7597c9a848f2d713a7387b72760ec7a2dd386830e91f7f1167e0a18

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\sessionstore-backups\recovery.baklz4

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          d055817eea1233efbff37d612f73cdfa

                                                                                                                                                          SHA1

                                                                                                                                                          b17d1e94a6dcb46ed81020d5990f43f4b77ba037

                                                                                                                                                          SHA256

                                                                                                                                                          e26a906a4d04b6769d3d1095c91f445a6cc76ab08defb06aa97bb99cef0e679b

                                                                                                                                                          SHA512

                                                                                                                                                          00d3cd86a7ba0eb9ee14572c67eb2728a9cbc616f214d3550a223fe356d81a45604ef8be65cec757ad291264ecd35174ee0f310eb675d6cf323fe2b9c511faa1

                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxumog7h.default-release\sessionstore-backups\recovery.baklz4

                                                                                                                                                          Filesize

                                                                                                                                                          1KB

                                                                                                                                                          MD5

                                                                                                                                                          ffda80033aac28955b65f44d3be6c84c

                                                                                                                                                          SHA1

                                                                                                                                                          82852459e7da8e97253885ea902da00904b9372a

                                                                                                                                                          SHA256

                                                                                                                                                          43bbd099f7d8e821c172a10f6105b94022a3edf03d6fdab7c02ed0a7fcac9571

                                                                                                                                                          SHA512

                                                                                                                                                          837bbc141fa7105236fda3fc678fa29f9d143b4d668bb9522fba131d0653cd04f3ff0a524773e73b7cfedeec948eeab9f842d9d97d29ab716cbb10f08ac4b83f

                                                                                                                                                        • C:\Users\Admin\Downloads\Unconfirmed 362628.crdownload

                                                                                                                                                          Filesize

                                                                                                                                                          234KB

                                                                                                                                                          MD5

                                                                                                                                                          fedb45ddbd72fc70a81c789763038d81

                                                                                                                                                          SHA1

                                                                                                                                                          f1ed20c626d0a7ca2808ed768e7d7b319bc4c84a

                                                                                                                                                          SHA256

                                                                                                                                                          eacd5ed86a8ddd368a1089c7b97b791258e3eeb89c76c6da829b58d469f654b2

                                                                                                                                                          SHA512

                                                                                                                                                          813c0367f3aeceea9be02ffad4bfa8092ea44b428e68db8f3f33e45e4e5e53599d985fa79a708679b6957cbd04d9b9d67b288137fa71ac5a59e917b8792c8298

                                                                                                                                                        • C:\Users\Admin\Downloads\Unconfirmed 892537.crdownload

                                                                                                                                                          Filesize

                                                                                                                                                          1.5MB

                                                                                                                                                          MD5

                                                                                                                                                          f1320bd826092e99fcec85cc96a29791

                                                                                                                                                          SHA1

                                                                                                                                                          c0fa3b83cf9f9ec5e584fbca4a0afa9a9faa13ed

                                                                                                                                                          SHA256

                                                                                                                                                          ad12cec3a3957ff73a689e0d65a05b6328c80fd76336a1b1a6285335f8dab1ba

                                                                                                                                                          SHA512

                                                                                                                                                          c6ba7770de0302dd90b04393a47dd7d80a0de26fab0bc11e147bf356e3e54ec69ba78e3df05f4f8718ba08ccaefbd6ea0409857973af3b6b57d271762685823a