Overview

overview

10

Static

static

1

MEMZ-virus

windows11-21h2-x64

10

Resubmissions

07-08-2024 08:22

240807-j91e7avgrp 3

06-08-2024 23:44

240806-3rmk6avaml 10

Analysis

  • max time kernel
    1050s
  • max time network
    1052s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    06-08-2024 23:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MEMZ-virus

  • Size

    247KB

  • MD5

    6be096a120a7ed29c5f0e1438c229297

  • SHA1

    9bd59fa300a6a1f92614299513ed3ff942f6b628

  • SHA256

    759a62a1d7e2935c1e3898be2853ca90ef10dba4da89639a577f867342923488

  • SHA512

    e4f366ce09535fd36ef002fd679a3dc20b9d62d838e2aa3a76004a4437455fdca3546d0baec83de84ad0b37ebdec7ca800464d3ca6d8365729071121484badf3

  • SSDEEP

    6144:83ojA3uokeOvHS1d1+sNs8wbiWQ29fvZJT3CqbMrhryf65NRPaCieMjAkvCJv1VP:OojA3uokeOvHS1d1+sNs8wbiWQ29fvZY

Score
10/10
cryptolockerwannacrycredential_accessdefense_evasiondiscoveryexecutionimpactpersistenceprivilege_escalationransomwarespywarestealerworm

Malware Config

Extracted

Path

C:\Users\Admin\Downloads\!Please Read Me!.txt

Family

wannacry

Ransom Note
Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �
Wallets

15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

  • CryptoLocker

    Ransomware family with multiple variants.

    ransomwarecryptolocker
  • Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Credentials from Password Stores: Credentials from Web Browsers 1 TTPs

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Downloads MZ/PE file
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

    credential_accessstealer
  • Drops startup file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 31 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 22 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Drops file in System32 directory 2 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 4 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 5 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 41 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Kills process with taskkill 4 IoCs
    evasion
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 57 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    evasionspywaretrojan
  • NTFS ADS 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 57 IoCs
  • Suspicious use of SetWindowsHookEx 18 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\MEMZ-virus
    1⤵
      PID:996
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4620
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • NTFS ADS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3056
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffeb0ae3cb8,0x7ffeb0ae3cc8,0x7ffeb0ae3cd8
        2⤵
          PID:972
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1904 /prefetch:2
          2⤵
            PID:2328
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:1664
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2548 /prefetch:8
            2⤵
              PID:2496
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
              2⤵
                PID:2424
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
                2⤵
                  PID:876
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
                  2⤵
                    PID:2220
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
                    2⤵
                      PID:2640
                    • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5152 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:2624
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4628 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4948
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
                      2⤵
                        PID:1372
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2064 /prefetch:1
                        2⤵
                          PID:1112
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5292 /prefetch:8
                          2⤵
                            PID:1132
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5296 /prefetch:8
                            2⤵
                            • Modifies registry class
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4304
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
                            2⤵
                              PID:3388
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3864 /prefetch:1
                              2⤵
                                PID:3516
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
                                2⤵
                                  PID:1600
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
                                  2⤵
                                    PID:1704
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
                                    2⤵
                                      PID:4364
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3944 /prefetch:1
                                      2⤵
                                        PID:2928
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1
                                        2⤵
                                          PID:2616
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
                                          2⤵
                                            PID:1084
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
                                            2⤵
                                              PID:5084
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1
                                              2⤵
                                                PID:2620
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3480 /prefetch:2
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:2124
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
                                                2⤵
                                                  PID:4304
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
                                                  2⤵
                                                    PID:1204
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
                                                    2⤵
                                                      PID:1836
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6856 /prefetch:1
                                                      2⤵
                                                        PID:2972
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
                                                        2⤵
                                                          PID:4132
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5816 /prefetch:8
                                                          2⤵
                                                            PID:4492
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1740,1927024798853129695,15105657850414636863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6968 /prefetch:8
                                                            2⤵
                                                            • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                            • NTFS ADS
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:2508
                                                        • C:\Windows\System32\CompPkgSrv.exe
                                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                          1⤵
                                                            PID:3456
                                                          • C:\Windows\System32\CompPkgSrv.exe
                                                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                            1⤵
                                                              PID:4716
                                                            • C:\Windows\System32\rundll32.exe
                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                              1⤵
                                                                PID:2060
                                                              • C:\Users\Admin\Downloads\WiseVector_StopX.exe
                                                                "C:\Users\Admin\Downloads\WiseVector_StopX.exe"
                                                                1⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Drops file in Program Files directory
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                • Suspicious use of SetWindowsHookEx
                                                                PID:1220
                                                                • C:\Windows\SysWOW64\regsvr32.exe
                                                                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\WiseVector\WiseVectorExt_X64.dll"
                                                                  2⤵
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:960
                                                                  • C:\Windows\system32\regsvr32.exe
                                                                    /s "C:\Program Files (x86)\WiseVector\WiseVectorExt_X64.dll"
                                                                    3⤵
                                                                    • Loads dropped DLL
                                                                    • Modifies registry class
                                                                    PID:4052
                                                                • C:\Program Files (x86)\WiseVector\WiseVectorService.exe
                                                                  "C:\Program Files (x86)\WiseVector\WiseVectorService.exe" -i
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:1372
                                                                • C:\Program Files (x86)\WiseVector\WiseVector.exe
                                                                  "C:\Program Files (x86)\WiseVector\WiseVector.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Enumerates connected drives
                                                                  • Drops file in Program Files directory
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Checks SCSI registry key(s)
                                                                  • Checks processor information in registry
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  • Suspicious use of SendNotifyMessage
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:2108
                                                                • C:\Program Files (x86)\WiseVector\WiseVector.exe
                                                                  "C:\Program Files (x86)\WiseVector\WiseVector.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:1032
                                                              • C:\Program Files (x86)\WiseVector\WiseVectorService.exe
                                                                "C:\Program Files (x86)\WiseVector\WiseVectorService.exe"
                                                                1⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                PID:1640
                                                                • C:\Program Files (x86)\WiseVector\WiseVectorSvc.exe
                                                                  "C:\Program Files (x86)\WiseVector\WiseVectorSvc.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Modifies data under HKEY_USERS
                                                                  • Modifies system certificate store
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  PID:3704
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                1⤵
                                                                • Drops file in Windows directory
                                                                • Enumerates system info in registry
                                                                • Modifies data under HKEY_USERS
                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                • Suspicious use of SendNotifyMessage
                                                                PID:4276
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeb132cc40,0x7ffeb132cc4c,0x7ffeb132cc58
                                                                  2⤵
                                                                    PID:848
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1824,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1820 /prefetch:2
                                                                    2⤵
                                                                      PID:2952
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2120,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2136 /prefetch:3
                                                                      2⤵
                                                                        PID:2724
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2160,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2376 /prefetch:8
                                                                        2⤵
                                                                          PID:2452
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3068,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3200 /prefetch:1
                                                                          2⤵
                                                                            PID:1884
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3160,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3256 /prefetch:1
                                                                            2⤵
                                                                              PID:1792
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4388,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4436 /prefetch:1
                                                                              2⤵
                                                                                PID:4248
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4448,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4556 /prefetch:8
                                                                                2⤵
                                                                                  PID:660
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4796,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4836 /prefetch:8
                                                                                  2⤵
                                                                                    PID:2484
                                                                                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level
                                                                                    2⤵
                                                                                    • Drops file in Windows directory
                                                                                    PID:276
                                                                                    • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff776494698,0x7ff7764946a4,0x7ff7764946b0
                                                                                      3⤵
                                                                                      • Drops file in Windows directory
                                                                                      PID:4376
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4680,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4304 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2280
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3468,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5108 /prefetch:8
                                                                                      2⤵
                                                                                        PID:3964
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3436,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3464 /prefetch:8
                                                                                        2⤵
                                                                                          PID:5020
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3384,i,3173668076111382125,2739273760908261152,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3356 /prefetch:8
                                                                                          2⤵
                                                                                          • Drops file in System32 directory
                                                                                          PID:1128
                                                                                      • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                                        1⤵
                                                                                          PID:3256
                                                                                        • C:\Windows\system32\svchost.exe
                                                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                          1⤵
                                                                                            PID:2920
                                                                                          • C:\Windows\system32\svchost.exe
                                                                                            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                            1⤵
                                                                                              PID:1768
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
                                                                                              1⤵
                                                                                              • Enumerates system info in registry
                                                                                              • Modifies registry class
                                                                                              • NTFS ADS
                                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                              • Suspicious use of SendNotifyMessage
                                                                                              PID:3132
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffeb0ae3cb8,0x7ffeb0ae3cc8,0x7ffeb0ae3cd8
                                                                                                2⤵
                                                                                                  PID:1868
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1884 /prefetch:2
                                                                                                  2⤵
                                                                                                    PID:4004
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
                                                                                                    2⤵
                                                                                                      PID:3044
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2620 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:2772
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:3308
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1084
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3680 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:1564
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:3376
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3628 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:3020
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:3748
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4336 /prefetch:8
                                                                                                                    2⤵
                                                                                                                      PID:3980
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5196 /prefetch:8
                                                                                                                      2⤵
                                                                                                                      • Modifies registry class
                                                                                                                      PID:1972
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 /prefetch:8
                                                                                                                      2⤵
                                                                                                                        PID:4868
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:2192
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:2572
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:328
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:4928
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:2956
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5088
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:2984
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8
                                                                                                                                      2⤵
                                                                                                                                      • NTFS ADS
                                                                                                                                      PID:3512
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:2196
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5472 /prefetch:2
                                                                                                                                        2⤵
                                                                                                                                          PID:1208
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:1208
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:4760
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:2920
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6964 /prefetch:8
                                                                                                                                                2⤵
                                                                                                                                                  PID:3180
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6112 /prefetch:8
                                                                                                                                                  2⤵
                                                                                                                                                  • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                                                                                                  • NTFS ADS
                                                                                                                                                  PID:2444
                                                                                                                                                • C:\Users\Admin\Downloads\CryptoLocker.exe
                                                                                                                                                  "C:\Users\Admin\Downloads\CryptoLocker.exe"
                                                                                                                                                  2⤵
                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  • NTFS ADS
                                                                                                                                                  PID:3100
                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" "/rC:\Users\Admin\Downloads\CryptoLocker.exe"
                                                                                                                                                    3⤵
                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                    • Adds Run key to start application
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    PID:3296
                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                      4⤵
                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      PID:1988
                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                        5⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:2068
                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                          6⤵
                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                          PID:2372
                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                            7⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                            PID:2300
                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                              8⤵
                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                              PID:956
                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                9⤵
                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                PID:32
                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                  10⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:5112
                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                    11⤵
                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    PID:4112
                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                      12⤵
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                      PID:3444
                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                        13⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:3600
                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                          14⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                          PID:4732
                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\{34184A33-0407-212E-3320-09040709E2C2}.exe" /w00000234
                                                                                                                                                                            15⤵
                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                            PID:1092
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2000
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:3112
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:3920
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3948 /prefetch:8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:912
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 /prefetch:8
                                                                                                                                                          2⤵
                                                                                                                                                          • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                                                                                                          • NTFS ADS
                                                                                                                                                          PID:3296
                                                                                                                                                        • C:\Users\Admin\Downloads\CryptoLocker.exe
                                                                                                                                                          "C:\Users\Admin\Downloads\CryptoLocker.exe"
                                                                                                                                                          2⤵
                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                          PID:3032
                                                                                                                                                        • C:\Users\Admin\Downloads\CryptoLocker.exe
                                                                                                                                                          "C:\Users\Admin\Downloads\CryptoLocker.exe"
                                                                                                                                                          2⤵
                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                          PID:1980
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:3412
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3560 /prefetch:8
                                                                                                                                                            2⤵
                                                                                                                                                            • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                                                                                                            • NTFS ADS
                                                                                                                                                            PID:4136
                                                                                                                                                          • C:\Users\Admin\Downloads\CryptoLocker (1).exe
                                                                                                                                                            "C:\Users\Admin\Downloads\CryptoLocker (1).exe"
                                                                                                                                                            2⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                            PID:4164
                                                                                                                                                          • C:\Users\Admin\Downloads\CryptoLocker (1).exe
                                                                                                                                                            "C:\Users\Admin\Downloads\CryptoLocker (1).exe"
                                                                                                                                                            2⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                            PID:1404
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:1840
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6956 /prefetch:8
                                                                                                                                                              2⤵
                                                                                                                                                                PID:5112
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,11218917979329011860,10501460539269100390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4820 /prefetch:8
                                                                                                                                                                2⤵
                                                                                                                                                                • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                                                                                                                • NTFS ADS
                                                                                                                                                                PID:476
                                                                                                                                                              • C:\Users\Admin\Downloads\WannaCry.exe
                                                                                                                                                                "C:\Users\Admin\Downloads\WannaCry.exe"
                                                                                                                                                                2⤵
                                                                                                                                                                • Drops startup file
                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                • Adds Run key to start application
                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                PID:3016
                                                                                                                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                  C:\Windows\system32\cmd.exe /c 163111722988930.bat
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:5048
                                                                                                                                                                  • C:\Windows\SysWOW64\cscript.exe
                                                                                                                                                                    cscript //nologo c.vbs
                                                                                                                                                                    4⤵
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    PID:3872
                                                                                                                                                                • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                                                                                                                                                  !WannaDecryptor!.exe f
                                                                                                                                                                  3⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                  PID:3124
                                                                                                                                                                • C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                  taskkill /f /im MSExchange*
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Kills process with taskkill
                                                                                                                                                                  PID:5056
                                                                                                                                                                • C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                  taskkill /f /im Microsoft.Exchange.*
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Kills process with taskkill
                                                                                                                                                                  PID:5008
                                                                                                                                                                • C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                  taskkill /f /im sqlserver.exe
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Kills process with taskkill
                                                                                                                                                                  PID:428
                                                                                                                                                                • C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                  taskkill /f /im sqlwriter.exe
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Kills process with taskkill
                                                                                                                                                                  PID:4840
                                                                                                                                                                • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                                                                                                                                                  !WannaDecryptor!.exe c
                                                                                                                                                                  3⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                  PID:5032
                                                                                                                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                  cmd.exe /c start /b !WannaDecryptor!.exe v
                                                                                                                                                                  3⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:2352
                                                                                                                                                                  • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                                                                                                                                                    !WannaDecryptor!.exe v
                                                                                                                                                                    4⤵
                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                    PID:1100
                                                                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                      cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
                                                                                                                                                                      5⤵
                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                      PID:4796
                                                                                                                                                                      • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                                                                                                                                                        wmic shadowcopy delete
                                                                                                                                                                        6⤵
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:2240
                                                                                                                                                                • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                                                                                                                                                  !WannaDecryptor!.exe
                                                                                                                                                                  3⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • Sets desktop wallpaper using registry
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                  PID:2700
                                                                                                                                                              • C:\Users\Admin\Downloads\WannaCry.exe
                                                                                                                                                                "C:\Users\Admin\Downloads\WannaCry.exe"
                                                                                                                                                                2⤵
                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                PID:1428
                                                                                                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                              1⤵
                                                                                                                                                                PID:1308
                                                                                                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:2620
                                                                                                                                                                • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                  C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004F0
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:3176
                                                                                                                                                                  • C:\Program Files (x86)\WiseVector\WiseVector.exe
                                                                                                                                                                    "C:\Program Files (x86)\WiseVector\WiseVector.exe"
                                                                                                                                                                    1⤵
                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                    PID:2300
                                                                                                                                                                  • C:\Windows\system32\vssvc.exe
                                                                                                                                                                    C:\Windows\system32\vssvc.exe
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:1164

                                                                                                                                                                    Network

                                                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                                                    Reconnaissance

                                                                                                                                                                    Resource Development

                                                                                                                                                                    Initial Access

                                                                                                                                                                    Execution

                                                                                                                                                                    Windows Management Instrumentation

                                                                                                                                                                    1
                                                                                                                                                                    T1047

                                                                                                                                                                    Persistence

                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                    1
                                                                                                                                                                    T1547

                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                    1
                                                                                                                                                                    T1547.001

                                                                                                                                                                    Event Triggered Execution

                                                                                                                                                                    1
                                                                                                                                                                    T1546

                                                                                                                                                                    Component Object Model Hijacking

                                                                                                                                                                    1
                                                                                                                                                                    T1546.015

                                                                                                                                                                    Privilege Escalation

                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                    1
                                                                                                                                                                    T1547

                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                    1
                                                                                                                                                                    T1547.001

                                                                                                                                                                    Event Triggered Execution

                                                                                                                                                                    1
                                                                                                                                                                    T1546

                                                                                                                                                                    Component Object Model Hijacking

                                                                                                                                                                    1
                                                                                                                                                                    T1546.015

                                                                                                                                                                    Defense Evasion

                                                                                                                                                                    Indicator Removal

                                                                                                                                                                    1
                                                                                                                                                                    T1070

                                                                                                                                                                    File Deletion

                                                                                                                                                                    1
                                                                                                                                                                    T1070.004

                                                                                                                                                                    Modify Registry

                                                                                                                                                                    3
                                                                                                                                                                    T1112

                                                                                                                                                                    Subvert Trust Controls

                                                                                                                                                                    2
                                                                                                                                                                    T1553

                                                                                                                                                                    Install Root Certificate

                                                                                                                                                                    1
                                                                                                                                                                    T1553.004

                                                                                                                                                                    SIP and Trust Provider Hijacking

                                                                                                                                                                    1
                                                                                                                                                                    T1553.003

                                                                                                                                                                    Credential Access

                                                                                                                                                                    Credentials from Password Stores

                                                                                                                                                                    2
                                                                                                                                                                    T1555

                                                                                                                                                                    Credentials from Web Browsers

                                                                                                                                                                    1
                                                                                                                                                                    T1555.003

                                                                                                                                                                    Windows Credential Manager

                                                                                                                                                                    1
                                                                                                                                                                    T1555.004

                                                                                                                                                                    Unsecured Credentials

                                                                                                                                                                    1
                                                                                                                                                                    T1552

                                                                                                                                                                    Credentials In Files

                                                                                                                                                                    1
                                                                                                                                                                    T1552.001

                                                                                                                                                                    Discovery

                                                                                                                                                                    Browser Information Discovery

                                                                                                                                                                    1
                                                                                                                                                                    T1217

                                                                                                                                                                    Peripheral Device Discovery

                                                                                                                                                                    2
                                                                                                                                                                    T1120

                                                                                                                                                                    Query Registry

                                                                                                                                                                    5
                                                                                                                                                                    T1012

                                                                                                                                                                    System Information Discovery

                                                                                                                                                                    5
                                                                                                                                                                    T1082

                                                                                                                                                                    System Location Discovery

                                                                                                                                                                    1
                                                                                                                                                                    T1614

                                                                                                                                                                    System Language Discovery

                                                                                                                                                                    1
                                                                                                                                                                    T1614.001

                                                                                                                                                                    Lateral Movement

                                                                                                                                                                    Collection

                                                                                                                                                                    Data from Local System

                                                                                                                                                                    1
                                                                                                                                                                    T1005

                                                                                                                                                                    Command and Control

                                                                                                                                                                    Web Service

                                                                                                                                                                    1
                                                                                                                                                                    T1102

                                                                                                                                                                    Exfiltration

                                                                                                                                                                    Impact

                                                                                                                                                                    Defacement

                                                                                                                                                                    1
                                                                                                                                                                    T1491

                                                                                                                                                                    Inhibit System Recovery

                                                                                                                                                                    1
                                                                                                                                                                    T1490

                                                                                                                                                                    Replay Monitor

                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                    Downloads

                                                                                                                                                                    • C:\3OMOm22Dm\3OMOm22Dm.doc
                                                                                                                                                                      Filesize

                                                                                                                                                                      91KB

                                                                                                                                                                      MD5

                                                                                                                                                                      73d1c2fac9138fe0199b52b1a13ee9e5

                                                                                                                                                                      SHA1

                                                                                                                                                                      9c177e51f154b2078de673027b653d62fa0ee121

                                                                                                                                                                      SHA256

                                                                                                                                                                      d55994846075d1b25c74397900c63f7d51a9e83c3944bfab0c0530ca9727e316

                                                                                                                                                                      SHA512

                                                                                                                                                                      7e46e5b9f4e91cfb10b74be4a76639cf07b382a05858792f246ba1dd27392bb8cb4e281f283c29fe43d981f4485cd8ea13adddbc6085cd18a76936ad27405096

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\3OMOm22Dm\3OMOm22Dm.jpg
                                                                                                                                                                      Filesize

                                                                                                                                                                      59KB

                                                                                                                                                                      MD5

                                                                                                                                                                      340dc4cece659502060d48bf8c7c55b5

                                                                                                                                                                      SHA1

                                                                                                                                                                      c0cce25b06f18a55dfd89369fd34c4a40d1ca594

                                                                                                                                                                      SHA256

                                                                                                                                                                      42e271b2b7fbdd8f19dd6521163cb694ea5605441eff8e2d6d7d0807adba32d5

                                                                                                                                                                      SHA512

                                                                                                                                                                      905a5a627e4521f30d011310f1fbd07ef93df09b8856b5644467147bdeafbd374c8410a048cc7d17f4e803ba53dd3743938cba4624b3030116493407238dd9c8

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\3OMOm22Dm\3OMOm22Dm.sql
                                                                                                                                                                      Filesize

                                                                                                                                                                      84KB

                                                                                                                                                                      MD5

                                                                                                                                                                      e6561335125958dbe4c98e9eb50ca611

                                                                                                                                                                      SHA1

                                                                                                                                                                      9a0a46494a2b37ab2e9f5ff7bd1db23a5caca875

                                                                                                                                                                      SHA256

                                                                                                                                                                      e497991c8ac6ff00d402001bd10f91e5e9721375eae098ea5f4d3028eb5e280e

                                                                                                                                                                      SHA512

                                                                                                                                                                      2e805e8690aee7d31b6998386b6c3aba58a7c51497aeb77dd3d2e3c24333bc93e703d2c328650cd47354dabdec4de119cc96c81fa4bc8a99ac687f37bc23f872

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\3OMOm22Dm\3OMOm22Dm.xls
                                                                                                                                                                      Filesize

                                                                                                                                                                      106KB

                                                                                                                                                                      MD5

                                                                                                                                                                      46c740a689fb7dec01283a7eeae812e3

                                                                                                                                                                      SHA1

                                                                                                                                                                      6a78932b9fd079c9d4dd062c9859b8f024d49d62

                                                                                                                                                                      SHA256

                                                                                                                                                                      167abb27e9b7e1b3eefc6d30206b47b224ceed11854579dbd30f20f98c08397e

                                                                                                                                                                      SHA512

                                                                                                                                                                      9d87247faf1f9d37b5cd2be080201820d04b36191f90c1b527d4abe4429402aafc0fa850adfdaa2c9e017f1c3a1f318fbe14b6ce35184125f4015ba9f2e0e25e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\3OMOm22Dm\ZOMOm22Dm.mdb
                                                                                                                                                                      Filesize

                                                                                                                                                                      318KB

                                                                                                                                                                      MD5

                                                                                                                                                                      728ce2ad1037c6a2d88486a4ad777335

                                                                                                                                                                      SHA1

                                                                                                                                                                      746ad6ea0a4f955f517fe9725a80f508a4fca5dc

                                                                                                                                                                      SHA256

                                                                                                                                                                      94378b1befdf32e16ca217c721e973e56370927a6da21b31ea9df61bfdfa2945

                                                                                                                                                                      SHA512

                                                                                                                                                                      86d0024b019e64dbcffbcf2e0f344ba198707bf0d01044e9d9551cdf8a8c89cf57229908fb50da3da4450d1b76bc047bd18ddfdb15c2c7a52e5d6d7ae5a84afa

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\3OMOm22Dm\ZOMOm22Dm.txt
                                                                                                                                                                      Filesize

                                                                                                                                                                      956B

                                                                                                                                                                      MD5

                                                                                                                                                                      4e91f848a0b63efabe594bfc1cb7e174

                                                                                                                                                                      SHA1

                                                                                                                                                                      7828c58cf96791d8d57c1c7160cb575bf8d65621

                                                                                                                                                                      SHA256

                                                                                                                                                                      978a1c917e10c396a26a9b75d99a097a9b116a49a4be4d65090cb44899ddfa9d

                                                                                                                                                                      SHA512

                                                                                                                                                                      dbd5de8efb378f9fdb368e2ef48f4ef2a364a2e4290e679b5d6876d0e6902b60b4508aa6513f17523c28f218aeac256798355f81c5ca17791f9d2775b4b2c449

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\Eg.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      1.2MB

                                                                                                                                                                      MD5

                                                                                                                                                                      443383d3b5bd9957a3cfeb50442562ef

                                                                                                                                                                      SHA1

                                                                                                                                                                      0952bc7884f7b8d2f2a611b5c28c273ee9190d9a

                                                                                                                                                                      SHA256

                                                                                                                                                                      3dac7f7afc7fb390879bfb463a30f81ecb9892560d8370046c3de1d6aff150b3

                                                                                                                                                                      SHA512

                                                                                                                                                                      3d80a7a912bfca696431dd3ef573588ce733dd227e50bbf877626426a2279a45c4e0e0488f6221a48de9ad9bccd5ce4a273795bfb897951aed75c47b17d8073b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\EgAddtionalHelper.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      1.7MB

                                                                                                                                                                      MD5

                                                                                                                                                                      b486326f7d16c0373fee6e7a20cf2b15

                                                                                                                                                                      SHA1

                                                                                                                                                                      03bfdea3bb892a00ac75153d946902b7908f16d0

                                                                                                                                                                      SHA256

                                                                                                                                                                      43a6e1c08964e709d934192d8485609922abe9772424ecac9c7ec451b3ea7cbd

                                                                                                                                                                      SHA512

                                                                                                                                                                      f3d715306b91b667ecd7c45855739b03ecfd924ff0bdfa188d5a8bbdd6ca73d273afb3de6d9585eaddb6d4159eeb43114b5ac0f0ea0aea2cbf0c08e63df46322

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\EgHelperOne.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      755KB

                                                                                                                                                                      MD5

                                                                                                                                                                      7a452382477b84ce4f9312b362700eaa

                                                                                                                                                                      SHA1

                                                                                                                                                                      9c8b726fa45fa543721003934f91d97aaa70a8cc

                                                                                                                                                                      SHA256

                                                                                                                                                                      4f97f0d1f90f63825c0e70f0fca5e4c9ecf4c0250c5354ee1b272a0a6204ab65

                                                                                                                                                                      SHA512

                                                                                                                                                                      dab998f88490c20b7abcd4c5a4254bcf0c967d50b911965e17a5c23a81db0b3e5aa1da86a7fec3bfe8891c367afd930bdafae6fd2c6cf858c96224f799d516db

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\EgHelperThree.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      205KB

                                                                                                                                                                      MD5

                                                                                                                                                                      d1bbbb3ab51049deb5143aaa593131bb

                                                                                                                                                                      SHA1

                                                                                                                                                                      0d7a2812e258ffd6585982350e1246382dd86463

                                                                                                                                                                      SHA256

                                                                                                                                                                      47afad03a77ec17621fd688ecc4d160347363adf9890f98db90a3057005568dc

                                                                                                                                                                      SHA512

                                                                                                                                                                      5ee3d453ccaf822a23227782c85573feed84c2276e5cb2c46cf4dfa727a21f8286c53984a7905eee54feefeffa59b668edd09e3a275588ba031ae4526ef09121

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\EgHelperTwo.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      202KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ee10816a9b0e6fe7c504e59c5e01c947

                                                                                                                                                                      SHA1

                                                                                                                                                                      a8de2dc9fec813cfedecff0431ba64666aed7a8f

                                                                                                                                                                      SHA256

                                                                                                                                                                      3ceb8aeaa245fbf1c6afa10bf0362f1c0ddb178e9a592eb2ccb81919728a5061

                                                                                                                                                                      SHA512

                                                                                                                                                                      548e23b359784ffe3232e69894ebc6b8d63062c96931b4e6fa3a1565e75424aaaa6a30ec487aff9b5b74e194d866bdc35ba554dc82d6b29a6e5299df1168db33

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\WiseVector.exe
                                                                                                                                                                      Filesize

                                                                                                                                                                      7.3MB

                                                                                                                                                                      MD5

                                                                                                                                                                      be08ae0bbc95a6a336af2658bd814f42

                                                                                                                                                                      SHA1

                                                                                                                                                                      b158af97db766d86f45b55560a49d38e571747df

                                                                                                                                                                      SHA256

                                                                                                                                                                      f870de431bbc5b87044e87b9288a87c78b0d0e2ebdcf24077734e8bab8acf42e

                                                                                                                                                                      SHA512

                                                                                                                                                                      34c7c1650a1dec2e6da88d5e5b6c1b87d0cd040405788e313285ed2f7fff1c7ba7c8b6f0312f8475a75fb5cbc86c1683cdd99c3acebba3d7c2605a8ff5765b5d

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\WiseVectorExt_X64.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      154KB

                                                                                                                                                                      MD5

                                                                                                                                                                      fdea85a1f81fee19e6481060757e0d4e

                                                                                                                                                                      SHA1

                                                                                                                                                                      9d6b99d75873f44bb155db3a3ec50a1f66cf6fd4

                                                                                                                                                                      SHA256

                                                                                                                                                                      dd2a3b68994ffb5b5e84d2cf9171ada5d0be41f49ae756f7f08c7285c1ff3e8d

                                                                                                                                                                      SHA512

                                                                                                                                                                      2474bed7a5890d9746c664916cf756d022373351ac7ae994d3601ca902be9ceda454c56a97c11824c2891d4e08214b2df85cf830298da0a0d690bc46872582db

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\WiseVectorService.exe
                                                                                                                                                                      Filesize

                                                                                                                                                                      1.6MB

                                                                                                                                                                      MD5

                                                                                                                                                                      e88d240c740727714b5d7439700c0f24

                                                                                                                                                                      SHA1

                                                                                                                                                                      1e5407bafc6079065965888e820e76f26ac2b7c3

                                                                                                                                                                      SHA256

                                                                                                                                                                      79b22bca302ea4deee74d8bb748f1330a18ff14f9bab53375a293d19375fc3cc

                                                                                                                                                                      SHA512

                                                                                                                                                                      ded0952807433a5750f12aaf29d0a94acfe45d412c0103f401f3e153dcd5cdf51ec220ab55710e15395d77c7381f2c07ad6335e9dd03aeb7250ae0fffce305f9

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\WiseVectorSvc.exe
                                                                                                                                                                      Filesize

                                                                                                                                                                      102KB

                                                                                                                                                                      MD5

                                                                                                                                                                      bdf9eca4f00cd36a4a91b5be82950912

                                                                                                                                                                      SHA1

                                                                                                                                                                      59a90d1b8369d3c95d4fdeefc27c4b5af6f9412d

                                                                                                                                                                      SHA256

                                                                                                                                                                      4e4b6e7e1fc47e0a7a29cca24ecbc8f923e5966801e1645987954a9a4fe39b4f

                                                                                                                                                                      SHA512

                                                                                                                                                                      77f46afdea39f1ddd46cde4f13868df27852f739377977496ee1035eeefde5b6288ea45ca0f9c311fc4c77c370bc07721ad2c7f2d4291bf3e56af84c7984a64b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\lang\english.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      181B

                                                                                                                                                                      MD5

                                                                                                                                                                      1a7da7e2c4824f86017afb49548ee113

                                                                                                                                                                      SHA1

                                                                                                                                                                      79f78d895a3151973b5a6b7ba0d39234896f6eaa

                                                                                                                                                                      SHA256

                                                                                                                                                                      e616a32ca4a81baa3158746c4bfcd6c631697afc77af537dd1bb461ab40e97b0

                                                                                                                                                                      SHA512

                                                                                                                                                                      e096c6c2a821dea3f557a6e9eb82814bbadc01c88fb4004f959cafde653b417ff7865f4ca734bac04e43e23d52d0c9c2c6a54464a6e42cda3e105972915a1391

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\libcrypto-1_1.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      2.2MB

                                                                                                                                                                      MD5

                                                                                                                                                                      07827fe7caab1fe3afef23cda7b51478

                                                                                                                                                                      SHA1

                                                                                                                                                                      6618cccbda50c921260eaa56afe502153156bcfe

                                                                                                                                                                      SHA256

                                                                                                                                                                      16be78b4ebaa90cd1ee7f18983fef4e7a81910d63e34afc66fa877d72f510501

                                                                                                                                                                      SHA512

                                                                                                                                                                      8366ccda02e43d953248bb04388ecc283911ebd857a6d1bd0eafde615890660eff48988882ec3d7044b70c2f2919b3ad9e9243d0884d03e27e1a4c9121e7b706

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\vcomp120.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      116KB

                                                                                                                                                                      MD5

                                                                                                                                                                      27bc360d67f269a61bb052e10c9fceeb

                                                                                                                                                                      SHA1

                                                                                                                                                                      8d81406c8dd3ed8894d8aee07dd718dcfd2035c5

                                                                                                                                                                      SHA256

                                                                                                                                                                      fc12360ff09830bf08b7a2a238016eea2b9e9475cbea4c22043b264e76b3420c

                                                                                                                                                                      SHA512

                                                                                                                                                                      2807af25e00ea11c0acfae20d44ee0f02b2331c469f14f5d42814805ae16b7b2a11fbcd7f9046f3e11adc434133057dadab62beca63eb70793fd755f3f827755

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\wvsetting.ini
                                                                                                                                                                      Filesize

                                                                                                                                                                      718B

                                                                                                                                                                      MD5

                                                                                                                                                                      28cd019b072e33c2a2427ea8d8baa32b

                                                                                                                                                                      SHA1

                                                                                                                                                                      e782f50cc5d3b10f4466681f0502809e828eddc3

                                                                                                                                                                      SHA256

                                                                                                                                                                      8c171786b70136d35bfbf1a82171b40f58d304d4e20e82b3811a9e8adb4e91e0

                                                                                                                                                                      SHA512

                                                                                                                                                                      ae79ba58c0f39d0fd5496fd8bd7a822cf694cde3e7a9aaa4a452cd5433bf5ad9baf3b9df28a90ce3bca5270325156d1e345cd060ce023c7143d0358a17a58026

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\wvsetting.ini
                                                                                                                                                                      Filesize

                                                                                                                                                                      718B

                                                                                                                                                                      MD5

                                                                                                                                                                      c1802b5d8a3e065bf5338bc038bdbe40

                                                                                                                                                                      SHA1

                                                                                                                                                                      60a3bb9e9c60dc93d795510ee0e20711dae523e2

                                                                                                                                                                      SHA256

                                                                                                                                                                      2ccb17bb5949d19b2158ff439f9930f0ab4f43c0f05d69a7824ebaf440570412

                                                                                                                                                                      SHA512

                                                                                                                                                                      c8f9a570e5caee2c6280c8de9ea6cc38fb663590d2b0f7f4798015e92a183d17523cf3e0903687817a32070e9195b199f00bfdb8bc86bd6fddd479292129e479

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Program Files (x86)\WiseVector\wvsetting.ini
                                                                                                                                                                      Filesize

                                                                                                                                                                      718B

                                                                                                                                                                      MD5

                                                                                                                                                                      12989b94e5350cef66be029708e7cfea

                                                                                                                                                                      SHA1

                                                                                                                                                                      1a0476b023379dd1859536f7ee14ce0b86357ea2

                                                                                                                                                                      SHA256

                                                                                                                                                                      72e53e1b71f99decb0d9dc37a07a23f63f9d9aa134bb79cc8a183b0f82c64a5a

                                                                                                                                                                      SHA512

                                                                                                                                                                      3cfcebaf157c63c7ef96c72f42b260f7225e0c73a15d97498df8d591b28bbbb698fa364a374096d13ab5825fe899439b91d42055437d878b100e97c1f0e4dedd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                      Filesize

                                                                                                                                                                      64KB

                                                                                                                                                                      MD5

                                                                                                                                                                      b5ad5caaaee00cb8cf445427975ae66c

                                                                                                                                                                      SHA1

                                                                                                                                                                      dcde6527290a326e048f9c3a85280d3fa71e1e22

                                                                                                                                                                      SHA256

                                                                                                                                                                      b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                                                                                                                                                                      SHA512

                                                                                                                                                                      92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                      Filesize

                                                                                                                                                                      4B

                                                                                                                                                                      MD5

                                                                                                                                                                      f49655f856acb8884cc0ace29216f511

                                                                                                                                                                      SHA1

                                                                                                                                                                      cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                                                                                                                                                                      SHA256

                                                                                                                                                                      7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                                                                                                                                                                      SHA512

                                                                                                                                                                      599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                      Filesize

                                                                                                                                                                      1008B

                                                                                                                                                                      MD5

                                                                                                                                                                      d222b77a61527f2c177b0869e7babc24

                                                                                                                                                                      SHA1

                                                                                                                                                                      3f23acb984307a4aeba41ebbb70439c97ad1f268

                                                                                                                                                                      SHA256

                                                                                                                                                                      80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                                                                                                                                                                      SHA512

                                                                                                                                                                      d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001
                                                                                                                                                                      Filesize

                                                                                                                                                                      210KB

                                                                                                                                                                      MD5

                                                                                                                                                                      48d2860dd3168b6f06a4f27c6791bcaa

                                                                                                                                                                      SHA1

                                                                                                                                                                      f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

                                                                                                                                                                      SHA256

                                                                                                                                                                      04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

                                                                                                                                                                      SHA512

                                                                                                                                                                      172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002
                                                                                                                                                                      Filesize

                                                                                                                                                                      24KB

                                                                                                                                                                      MD5

                                                                                                                                                                      c594a826934b9505d591d0f7a7df80b7

                                                                                                                                                                      SHA1

                                                                                                                                                                      c04b8637e686f71f3fc46a29a86346ba9b04ae18

                                                                                                                                                                      SHA256

                                                                                                                                                                      e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                                                                                                                                                                      SHA512

                                                                                                                                                                      04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      216B

                                                                                                                                                                      MD5

                                                                                                                                                                      c38969a641dabd5b7ba3bab976feedc2

                                                                                                                                                                      SHA1

                                                                                                                                                                      c3dff48747bcd97a27569dd342ab7a513b72de89

                                                                                                                                                                      SHA256

                                                                                                                                                                      6fe9f5a4f7609a763cb07766e55e21acc20b1ae7a524322fca600fc6025ba4b7

                                                                                                                                                                      SHA512

                                                                                                                                                                      838172b136b4ad6f505587aec5e56320898dbd9269a361a8a42a3a57e27e856e76a9bb422ecdc7fb34dcdf5d55ab37f1ca781c013ac38fcbeb9b9dd4b68e4402

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      216B

                                                                                                                                                                      MD5

                                                                                                                                                                      a9a26ba397b8f9a4655536193383199e

                                                                                                                                                                      SHA1

                                                                                                                                                                      96df0d7389af47087290ba443eafacd4898303b2

                                                                                                                                                                      SHA256

                                                                                                                                                                      80b73f7f2d97a84628d26bcfe3afa75960a1d88e9c566e51bb4e2829137fddc0

                                                                                                                                                                      SHA512

                                                                                                                                                                      4f633c5c2384639a00a5a87a34c6edcd04b97042bae955cd65b4f7b356dcee75266f893310d71bbb72d85fb3d1c3a20007b1ccf0ed0bacb7ee2d66d31a15aacd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      216B

                                                                                                                                                                      MD5

                                                                                                                                                                      ed3cb5f4cccc32c2156123cd2466316d

                                                                                                                                                                      SHA1

                                                                                                                                                                      3b475b37cce0e4d43d317583a092bbfbaa21f209

                                                                                                                                                                      SHA256

                                                                                                                                                                      9592c25ae7dd72203f1aedcf9b1741bdb9c6ca2229ddb2c7e0121b0d63f1e5fe

                                                                                                                                                                      SHA512

                                                                                                                                                                      2219c788bf08ed75be4b0efbc3d82319e9501ecab9e3583bb0d3255aacf665484559b5c51429634bf664f5af1fe25f28dfc0c7b5ce59e0ecdd8c135efe59f405

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1
                                                                                                                                                                      Filesize

                                                                                                                                                                      264KB

                                                                                                                                                                      MD5

                                                                                                                                                                      cfcaa8dd79f0a2211fcbbb8941553bba

                                                                                                                                                                      SHA1

                                                                                                                                                                      bae70098c08e1e85887469923bb68f2a235542c9

                                                                                                                                                                      SHA256

                                                                                                                                                                      975815a4811317faa805ab0cfe4ee31d97d479f05378b5eb94e4152515716559

                                                                                                                                                                      SHA512

                                                                                                                                                                      2dbd8349f8fa74dd70dc74b06fdafa60507639d5afa7832756bed3c24df0d1bb4d457a9b5942ee360ef23849157d20d834e9b85d735ef3ee1220c789d5a8d12d

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      2KB

                                                                                                                                                                      MD5

                                                                                                                                                                      25cc78a582b56ea33b7872ad8181f340

                                                                                                                                                                      SHA1

                                                                                                                                                                      f3832f42b833f9ece41b95913c85ebb891e3a846

                                                                                                                                                                      SHA256

                                                                                                                                                                      f50079d51f8dcf69ccdbe262ad4a18226c9c13b9c9f0e40dff20facaf7d09369

                                                                                                                                                                      SHA512

                                                                                                                                                                      0f420437854e9980d51bca661c4fc0283c8651babccbd888a3e8bc74382bda4a05cc07804d1691611303d5b5491aebafb757fde0ad0d98f4d6eb35c389a4e63f

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      2KB

                                                                                                                                                                      MD5

                                                                                                                                                                      34b2a5f64de9694dd42fa2349aaac601

                                                                                                                                                                      SHA1

                                                                                                                                                                      08ec49cc2530b3f94b7c06042ffbedfd6366e62e

                                                                                                                                                                      SHA256

                                                                                                                                                                      d19ac9f9d801a76e85135ccfebe29a7fb1a935eb9c40f49024c2cbb828f0e89b

                                                                                                                                                                      SHA512

                                                                                                                                                                      7ea10a393154dcb0bcf1c8434a38b78c6fe7496ee885eca34e993394bf3c5d283e781ffa569fb1e792ce5c78b0f2a3115c85cc84365dd753ff3e5112ce54e411

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                      Filesize

                                                                                                                                                                      2B

                                                                                                                                                                      MD5

                                                                                                                                                                      d751713988987e9331980363e24189ce

                                                                                                                                                                      SHA1

                                                                                                                                                                      97d170e1550eee4afc0af065b78cda302a97674c

                                                                                                                                                                      SHA256

                                                                                                                                                                      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                                                                                                                      SHA512

                                                                                                                                                                      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      356B

                                                                                                                                                                      MD5

                                                                                                                                                                      349bf0eda779bf317365b914736d7f1e

                                                                                                                                                                      SHA1

                                                                                                                                                                      1608db14e674bf37150be7f471eaf58d2ecbb116

                                                                                                                                                                      SHA256

                                                                                                                                                                      9d252af09afbbebc346f9804ea9c7616b09f2997b37f6aab270f8f87725752c6

                                                                                                                                                                      SHA512

                                                                                                                                                                      8590af140dfcb448bc23545c9e3eeaa0c4d44a6969ec616723e18aefbb278d355ed9f547f2616ca22780389aa0d6a9a3a5b1b634ab940d5635dfbeff81527cfd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      356B

                                                                                                                                                                      MD5

                                                                                                                                                                      02233604e49be0e2824420f23c9dcd9e

                                                                                                                                                                      SHA1

                                                                                                                                                                      7398c7b272e844bc99370f1041071671d51f0db9

                                                                                                                                                                      SHA256

                                                                                                                                                                      f8adc71c78b9b7abdb6e9061fa0da58a2127bd05fbf0704a93759d86f53d78c8

                                                                                                                                                                      SHA512

                                                                                                                                                                      5ed2662785d0b3adc787f1e6840fc73e72a8c8d84c83193905e8ea59f7dbb5cb123011b27462d47cb3d0e74bfc75d200fa25cddbf4999caf3804c68d4f25b3c7

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      356B

                                                                                                                                                                      MD5

                                                                                                                                                                      a08373b913fa1564a3af6300994a1b20

                                                                                                                                                                      SHA1

                                                                                                                                                                      bc19bf6575ab2debf2697c95ce90d8c904476fac

                                                                                                                                                                      SHA256

                                                                                                                                                                      55449f92bd7f418977457a91a8cbf931a7ba0f0a335751a6c5c762315e6015d7

                                                                                                                                                                      SHA512

                                                                                                                                                                      6cdfc23340eaa20147cf561846fcfa7a67e1633e7a23f5258c22a264a461ef1ed3ce7423410fe6f2ff3ac41b04576918f216a2537655a393320ea5ac166a8fe9

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      8KB

                                                                                                                                                                      MD5

                                                                                                                                                                      d5808927e8699d1da9d22dfe56ff916c

                                                                                                                                                                      SHA1

                                                                                                                                                                      8b923bfb640129ff360d52a511b830b607afc87e

                                                                                                                                                                      SHA256

                                                                                                                                                                      91035f04296c7547a4f521a99838ab77a3035caed6cf4f72f1521c054c22ec3e

                                                                                                                                                                      SHA512

                                                                                                                                                                      26b2a85e08a0e97c7415b8f1699d8876f0ffdbd2c0549c18bbda32ec15676e1e247f03178586c0b7cadc79191fa96d3656f08af3d4f255b654b143cd80c8191c

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      f5d47dc2a40340c4c8f9d9a60582ec31

                                                                                                                                                                      SHA1

                                                                                                                                                                      96db50d310a0cfce3b4f15872a5f204d3dc611ac

                                                                                                                                                                      SHA256

                                                                                                                                                                      5b67505e9abc2375bf9c0311ae88aeab0922e53e9c54a8dccd3e280f81ecd08a

                                                                                                                                                                      SHA512

                                                                                                                                                                      b5bf1f113dc975793789be748686d3d2f6ae822600b6c0a88aa073e3f8092bbbd0347ed38bb64b08bcf0fdddd5474bbdce0b35eb2f6e4debb0d4b6c92a96fe11

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      8KB

                                                                                                                                                                      MD5

                                                                                                                                                                      707b1af2adaa6d72ff9e800c0ecc90d6

                                                                                                                                                                      SHA1

                                                                                                                                                                      03451ec4051c5e668c1ac60ff74b3dbb96a5f739

                                                                                                                                                                      SHA256

                                                                                                                                                                      a1ad1c00bf0eb712218a9e861cb292e2252ef5b216f34098e4926b65576b6a48

                                                                                                                                                                      SHA512

                                                                                                                                                                      1977f0c593573caddf0cde13ba1d5135eeeeb67f4a4127a307d5b82ae36961dafb6ec53b21ec5d12d39ee3af311b70be673a4f7cceb0722f1d6fc51f7cc7fe42

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      64ab700d5ad3a0517a107eb100830a77

                                                                                                                                                                      SHA1

                                                                                                                                                                      4bf6395f173f374961a4c522120d57f65a2a93b2

                                                                                                                                                                      SHA256

                                                                                                                                                                      2ce3cfa03fef720f6a653d419a040f19d9507633fd6bc1de3e1516d4ae662556

                                                                                                                                                                      SHA512

                                                                                                                                                                      e220ab180bdf8a92b24365de1973b5998a5d337c8007b6f4c92d2db38cb96faab6b6f0ce04e89b742df59c2fb092f575e50f05f39f9be991f7f9f671385ed2a5

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      87ab666a89de65ce6c562e56c75bbac2

                                                                                                                                                                      SHA1

                                                                                                                                                                      7f705a78dcc3f3a25de14e351875799885476ab6

                                                                                                                                                                      SHA256

                                                                                                                                                                      4e2dcb68385e56795b1f5804d78ddab66b6ea84c9c3e7be2f135c6ffd6f1d54c

                                                                                                                                                                      SHA512

                                                                                                                                                                      003e8bfc0910fb8f54501cf8652cdf9206ac8a883f9b8850c7fb73586c0e00d5711d547bbd8a3261943908d300591682af889d76a8a326f73fbea9ead4be68b1

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      8f45818cbdda77d249e50c5bf6d1cadd

                                                                                                                                                                      SHA1

                                                                                                                                                                      2ef941d1e97134f42aca79a3c3ad71edc2497bc4

                                                                                                                                                                      SHA256

                                                                                                                                                                      f73afe1a026fe378e8ff59b097fd6248532a1649de561b7c6fa8459e16baf1c3

                                                                                                                                                                      SHA512

                                                                                                                                                                      f14171f1dcec63931ebbd121954d93bb0542fe1b2988c3bf91a30366b513f874ab2ab9d1f88e4ee46a9a2c24640c6dc3c41169b79ef9bb2d6877c54ce51e447c

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      6353e5ff9a1e22683fda2ab592b5509c

                                                                                                                                                                      SHA1

                                                                                                                                                                      1b3f80b1d07670d1076e137134afe85261a0dd53

                                                                                                                                                                      SHA256

                                                                                                                                                                      8ebe9841b9796914ee17bc5325c1f216c95a09cbb13f43585f3fc201ceef7c74

                                                                                                                                                                      SHA512

                                                                                                                                                                      c82e5b45a84dcf96c213ca72e77e815156db1f5a4b86bec0b0927bc47fb311331b42aad95ac240b41e098799dd3968bd383b7d1d36bd6752856351ca3100a654

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      0f55cab40b9fdf81c48265537ab3d0ef

                                                                                                                                                                      SHA1

                                                                                                                                                                      29b792db5eacd87dc9a279557d8cae6a8039ff89

                                                                                                                                                                      SHA256

                                                                                                                                                                      d240d3da14424e91b8c314f816a9051655b280fa4edf1232060a7128f4f26952

                                                                                                                                                                      SHA512

                                                                                                                                                                      f2789aaae75586fe0439bb752020cff9d727fa581e6fbe9f20b04ad4b5a13cbf0deb0a3358dbffff81cd750fcda1368b4129b1ab11c0399746cf1ce5e12640bc

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      0ad1e256c3d65625dc4e953604dd24e2

                                                                                                                                                                      SHA1

                                                                                                                                                                      d950518ca9bcdc5addb1f41bbdea8f51b4d3ce06

                                                                                                                                                                      SHA256

                                                                                                                                                                      57233cd84245c3fbf998489fb5b7db335af41146600fddae976c8b3129b4e94a

                                                                                                                                                                      SHA512

                                                                                                                                                                      bb1e4634d22027b13ee7b34570cf7d46033b91b63ed57709916c1fb3972c79fe8a4884f6402cacd4e52cda07cab12bc44ff40b5b9144abaee8798cdd120fb8ba

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      13KB

                                                                                                                                                                      MD5

                                                                                                                                                                      e5bd463b7779541854b20c4d9e985c86

                                                                                                                                                                      SHA1

                                                                                                                                                                      cbd2e31a9002ba6c3bc081abe1c730ce1908ac9d

                                                                                                                                                                      SHA256

                                                                                                                                                                      68ff170fe212ffe5a25c2f68a917fe44b899c83bf1a416e4e2a6d24ca812bcc7

                                                                                                                                                                      SHA512

                                                                                                                                                                      a8df1eeb7442fc878cd1ce3e2a3c6940a777789ff9d519ee79fc1071fadd0326d5c98d67767d8748d9d09617decbd9fc2cf2e04ab0a26403184e5f125506d988

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      196KB

                                                                                                                                                                      MD5

                                                                                                                                                                      a67ec987bb6ffca2803d382ff6bc5048

                                                                                                                                                                      SHA1

                                                                                                                                                                      9a96f4a6f81068c31aee1aa4a78a4e1ed3855e70

                                                                                                                                                                      SHA256

                                                                                                                                                                      6e1bb000906e1f60409427f5563ac065f530a2aa4432fec2512ec55ab841fff1

                                                                                                                                                                      SHA512

                                                                                                                                                                      06d3026f488dafaa4484f36ddc09bf6b5af6eaa0830bf134af6a6e39af5af79aa01854c965f499d79eb87e12c1a246ab0bb08c63c841f737cd4189cde3551a4b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      101KB

                                                                                                                                                                      MD5

                                                                                                                                                                      bff81ab7065975f81b31ff3fa69e3497

                                                                                                                                                                      SHA1

                                                                                                                                                                      d1921a6adca83a6e8de20cfe111557f0447af97e

                                                                                                                                                                      SHA256

                                                                                                                                                                      cc2a84400f8788b80a9ddd9f8675581053c6459e4752e38fce904c63c487a8bb

                                                                                                                                                                      SHA512

                                                                                                                                                                      fa15bc8182e47aa279e29403ab828c59c9774be422f013ee433df5d84eca3430d614b9456024808a2052be4d61f06410f72f10f8fb97b1622cf3d038397d6c55

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      215KB

                                                                                                                                                                      MD5

                                                                                                                                                                      07ec78b47985e5a46c97f4213e1af1fb

                                                                                                                                                                      SHA1

                                                                                                                                                                      8f3a86a940be9a70ff6e94a29eb31797af0f7ef3

                                                                                                                                                                      SHA256

                                                                                                                                                                      5920c9a54e118234f7fb6c3e3a42f9f0dc7ba26c94e416c82e199a51c69ad117

                                                                                                                                                                      SHA512

                                                                                                                                                                      0fd834dd0ec4f5a49296abfb97077457b795d1696102cad682313ee6b417dd5c78291b04b92d6cfa47986993144fe83ee753021d0739802b611aad6751064209

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      196KB

                                                                                                                                                                      MD5

                                                                                                                                                                      de288e240fac0adf76a114b9b65c4b0e

                                                                                                                                                                      SHA1

                                                                                                                                                                      02d3c7850f6f6e7ef7637133b3e5fe900cf30402

                                                                                                                                                                      SHA256

                                                                                                                                                                      b004d23530cc3d0ce85e81cf6f4b2de0601c515130415cfa2c3129c4f63ad6c1

                                                                                                                                                                      SHA512

                                                                                                                                                                      9edb9b48f8b678ca08fd150102fa1feb4204efef565109a2598e298617f11be99e2376eb87203392e6af787a8333ccb5103ccf5815ce5bba4652306eb61d4cbe

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      196KB

                                                                                                                                                                      MD5

                                                                                                                                                                      26f1f5a815bb5c20866fe4bb34ba7b20

                                                                                                                                                                      SHA1

                                                                                                                                                                      268ba6f4e3c8cd030dae9e252bced9e7b565f7c3

                                                                                                                                                                      SHA256

                                                                                                                                                                      73bd5678c8d8305ca815d8987d8f76452da0998198d4617f27071b6ac77602ae

                                                                                                                                                                      SHA512

                                                                                                                                                                      70170f264e3d1789dccdb04e546e2cb6bee2fe481486b79c05bb5fabcf7d7741cc8c6f2882bf532752a0975782f7919133f722cf9271c78827fd6f18880616fa

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      238KB

                                                                                                                                                                      MD5

                                                                                                                                                                      989336f57a0e7ca8089e5bdcdad6b3e9

                                                                                                                                                                      SHA1

                                                                                                                                                                      9e0da1e39f6bd057df94ddf529b35a9e1c7a311c

                                                                                                                                                                      SHA256

                                                                                                                                                                      a1300e42f092ee79632fabf25ea72285aac186b062f0671f59a150a5329b2a29

                                                                                                                                                                      SHA512

                                                                                                                                                                      1a89f0e21a011d04ed8599bb3f407fdc9cc9a6a71f0ebcf66ea334de3c70590377f109804a81a5673dd22bbca93f87b0e38aba6dad8395c5bcbe98d4b5060d01

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      196KB

                                                                                                                                                                      MD5

                                                                                                                                                                      63ba49ee91ba9d41640acda99db935dc

                                                                                                                                                                      SHA1

                                                                                                                                                                      410e3d06f4b9f76c9944e997c0b4746a007421e4

                                                                                                                                                                      SHA256

                                                                                                                                                                      5bd28410ed5c5ffef3c5afa1df291441dcec01a182c595f2578a686f9d1f6a99

                                                                                                                                                                      SHA512

                                                                                                                                                                      b4b2543feb53757cf1a444721d156ec1a9dbd5f8a60bcf7b0e101d17c592b8ef22bea455b348f27a9736c181d09f35b380ca76de4f4cad7fbef69005841c481b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      152B

                                                                                                                                                                      MD5

                                                                                                                                                                      c4a10f6df4922438ca68ada540730100

                                                                                                                                                                      SHA1

                                                                                                                                                                      4c7bfbe3e2358a28bf5b024c4be485fa6773629e

                                                                                                                                                                      SHA256

                                                                                                                                                                      f286c908fea67163f02532503b5555a939f894c6f2e683d80679b7e5726a7c02

                                                                                                                                                                      SHA512

                                                                                                                                                                      b4d407341989e0bbbe0cdd64f7757bea17f0141a89104301dd7ffe45e7511d3ea27c53306381a29c24df68bdb9677eb8c07d4d88874d86aba41bb6f0ce7a942c

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      152B

                                                                                                                                                                      MD5

                                                                                                                                                                      4c3889d3f0d2246f800c495aec7c3f7c

                                                                                                                                                                      SHA1

                                                                                                                                                                      dd38e6bf74617bfcf9d6cceff2f746a094114220

                                                                                                                                                                      SHA256

                                                                                                                                                                      0a4781bca132edf11500537cbf95ff840c2b6fd33cd94809ca9929f00044bea4

                                                                                                                                                                      SHA512

                                                                                                                                                                      2d6cb23e2977c0890f69751a96daeb71e0f12089625f32b34b032615435408f21047b90c19de09f83ef99957681440fdc0c985e079bb196371881b5fdca68a37

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      152B

                                                                                                                                                                      MD5

                                                                                                                                                                      38076ba686644d710e075738ac859231

                                                                                                                                                                      SHA1

                                                                                                                                                                      247bf11c36f896ac160c9ce6a696a0b6c4114da0

                                                                                                                                                                      SHA256

                                                                                                                                                                      c9a88e177d69d77a748e107ec9bccb7f2198b9cbe7cc55fb85b45ddc9a88226f

                                                                                                                                                                      SHA512

                                                                                                                                                                      aabb7db0276aff1f25c73d836f361d9795b23517f1ba70676c00853eba1eb29ddfc32b0c52cfa785edb3ce61716395288a5b63ffb0ab05cc4a39132b583df357

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      152B

                                                                                                                                                                      MD5

                                                                                                                                                                      6f48cb897e2d5cf1ec97d4b2f8ee2431

                                                                                                                                                                      SHA1

                                                                                                                                                                      61e83fb960f410e49ae58b517da35eb4bb593037

                                                                                                                                                                      SHA256

                                                                                                                                                                      700d8496273147f65d773f83ff9978f7cd9ced93211f91cbfe345b40d36cc41b

                                                                                                                                                                      SHA512

                                                                                                                                                                      0fc3cf6c32cb60586128479d97a9b1922f1f8362e5cdd774fa04f817b81cd26eba8057473e619e57bc74aa470c8e832361157eb7e44f73d48f0d760c028a3d92

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
                                                                                                                                                                      Filesize

                                                                                                                                                                      64KB

                                                                                                                                                                      MD5

                                                                                                                                                                      d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                                                      SHA1

                                                                                                                                                                      ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                                                      SHA256

                                                                                                                                                                      34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                                                      SHA512

                                                                                                                                                                      2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
                                                                                                                                                                      Filesize

                                                                                                                                                                      69KB

                                                                                                                                                                      MD5

                                                                                                                                                                      24a806fccb1d271a0e884e1897f2c1bc

                                                                                                                                                                      SHA1

                                                                                                                                                                      11bde7bb9cc39a5ef1bcddfc526f3083c9f2298a

                                                                                                                                                                      SHA256

                                                                                                                                                                      e83f90413d723b682d15972abeaaa71b9cead9b0c25bf8aac88485d4be46fb85

                                                                                                                                                                      SHA512

                                                                                                                                                                      33255665affcba0a0ada9cf3712ee237c92433a09cda894d63dd1384349e2159d0fe06fa09cca616668ef8fcbb8d0a73ef381d30702c20aad95fc5e9396101ae

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
                                                                                                                                                                      Filesize

                                                                                                                                                                      41KB

                                                                                                                                                                      MD5

                                                                                                                                                                      cc6a7af85ef808b23fb0d7856ed6aafb

                                                                                                                                                                      SHA1

                                                                                                                                                                      9c32e7d7b33e9769211fbce53001a17848d546b5

                                                                                                                                                                      SHA256

                                                                                                                                                                      0d8b4860b16e4ee74beff0e2034bd195352dba61a455efdeb35d6ede7c4c7391

                                                                                                                                                                      SHA512

                                                                                                                                                                      d9e9086a0d6827ba073028b67a73e8d0936ff9813238075af53dd75af0f7417b56dc4642417ced05af36ec9e66bac671ab8ed9d0f73dd7b84a6695026ba2abf6

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
                                                                                                                                                                      Filesize

                                                                                                                                                                      63KB

                                                                                                                                                                      MD5

                                                                                                                                                                      710d7637cc7e21b62fd3efe6aba1fd27

                                                                                                                                                                      SHA1

                                                                                                                                                                      8645d6b137064c7b38e10c736724e17787db6cf3

                                                                                                                                                                      SHA256

                                                                                                                                                                      c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

                                                                                                                                                                      SHA512

                                                                                                                                                                      19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
                                                                                                                                                                      Filesize

                                                                                                                                                                      19KB

                                                                                                                                                                      MD5

                                                                                                                                                                      2e86a72f4e82614cd4842950d2e0a716

                                                                                                                                                                      SHA1

                                                                                                                                                                      d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                                                                      SHA256

                                                                                                                                                                      c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                                                                      SHA512

                                                                                                                                                                      7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
                                                                                                                                                                      Filesize

                                                                                                                                                                      88KB

                                                                                                                                                                      MD5

                                                                                                                                                                      b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                                                                                                      SHA1

                                                                                                                                                                      386ba241790252df01a6a028b3238de2f995a559

                                                                                                                                                                      SHA256

                                                                                                                                                                      b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                                                                                                      SHA512

                                                                                                                                                                      546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
                                                                                                                                                                      Filesize

                                                                                                                                                                      1.2MB

                                                                                                                                                                      MD5

                                                                                                                                                                      027a77a637cb439865b2008d68867e99

                                                                                                                                                                      SHA1

                                                                                                                                                                      ba448ff5be0d69dbe0889237693371f4f0a2425e

                                                                                                                                                                      SHA256

                                                                                                                                                                      6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd

                                                                                                                                                                      SHA512

                                                                                                                                                                      66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046
                                                                                                                                                                      Filesize

                                                                                                                                                                      17KB

                                                                                                                                                                      MD5

                                                                                                                                                                      38f8e7261a38d317013a5cd6e58d0b4e

                                                                                                                                                                      SHA1

                                                                                                                                                                      effbe07e14a6d17672def855bd86b1caefa6c55d

                                                                                                                                                                      SHA256

                                                                                                                                                                      fe92360bd913b8efc670f27e88e61484dd1ce68d7689cd3b4f6722b96ff6e0f5

                                                                                                                                                                      SHA512

                                                                                                                                                                      05964cfbc4c55d6453d98dbb24b696ea914ddbdf0b6b62e2a12b1968c15f6a16fe17e68c46b8eb93786bf6fe3ab2a07f189a432a05454856ce08cc577582ce79

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      5KB

                                                                                                                                                                      MD5

                                                                                                                                                                      27365c545cb81f3ebb438ccc709f9389

                                                                                                                                                                      SHA1

                                                                                                                                                                      ff701b986b6d229b31bba5705a10612f6330f538

                                                                                                                                                                      SHA256

                                                                                                                                                                      cb16c1d2f3c619924eef986d385f90f5cdab0453ba86808e4aa83acd45327c81

                                                                                                                                                                      SHA512

                                                                                                                                                                      11c4beee9b0603ba65fbb9ce70075a03d5238c7b36b414bdcaf73af759b3f18bdbd812cd58a589ae8f2ea58496591105d307fac862051b6854d344efcb1c664e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      3163b432e7c51169e1cc9ca865ae39b4

                                                                                                                                                                      SHA1

                                                                                                                                                                      b8545b62f69c79fc617f58921c1ef886af5eb5dd

                                                                                                                                                                      SHA256

                                                                                                                                                                      a1bd73579e0e74163e21d6fc65c1f7cc1e9a9ba7889a6837fe7345036ca76ecf

                                                                                                                                                                      SHA512

                                                                                                                                                                      cb35c825e60c6d0ca22fc337136bf109a2e6dde47610c53731e7cc99eb2bc7f477238c8f97d3103f78010f08efcbbbe18a8183f8f48e14f71f4775081fa850b4

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      9fa46b2dd3a96bfcaba225c69f169003

                                                                                                                                                                      SHA1

                                                                                                                                                                      c2b7176fac3e84fafb269df7bec7e2289245f931

                                                                                                                                                                      SHA256

                                                                                                                                                                      4c252cda31980aa61033ada3f8cc5dc8ccbeb4b9048811c54082be76be4d7094

                                                                                                                                                                      SHA512

                                                                                                                                                                      e4357b1f3cee82df0f0f8ac729a1e7104c0888387b66664d7e550173d34798be59f9673e421b7555f704d2e9348d9f27122a1bef207dc412552fa599ea19efa4

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ce3a54aad6a2d79c3ff319a2b02318a1

                                                                                                                                                                      SHA1

                                                                                                                                                                      a6741fdaa72b9a2f04fd9ea690262d67752750b4

                                                                                                                                                                      SHA256

                                                                                                                                                                      5d990552c5e12bb29d804fceab61ed13eaa8d000b1ed082688aa50018d8b45cc

                                                                                                                                                                      SHA512

                                                                                                                                                                      5187f44ea8b2977a6ead998acaf955b9caa76daa1cf1cb80dc3fbe444bd07f1085f48d798a3fb6b12ae91d17b3da4f178c7b33ff0cd3166a750f20b32a75d191

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      cf043fc9205155ac04172d5f47919642

                                                                                                                                                                      SHA1

                                                                                                                                                                      cba571ea799ff4d29ce566a00009fa8dd6ed57eb

                                                                                                                                                                      SHA256

                                                                                                                                                                      7ede1e0317f98823112ff5c9da2cfff44b8c7a831c0a6e317ae6a655d7562314

                                                                                                                                                                      SHA512

                                                                                                                                                                      1e0710ddcde1245fb96055ab29312a5e6fb1d19ddf25be4a689b54ef8eb13a4990b6ed34056ec4dc5be5543286f8057ea11d0c871604587181af38769167625d

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      Filesize

                                                                                                                                                                      5KB

                                                                                                                                                                      MD5

                                                                                                                                                                      144f9cb66148415a5ce455d37a4d242d

                                                                                                                                                                      SHA1

                                                                                                                                                                      86ed4944340bf6f3032d220ecf5da1c9fa3cb4fb

                                                                                                                                                                      SHA256

                                                                                                                                                                      c6345ff70fa7fd3020ef0cf34463d206e996dbb3c769b1985aedf2782b4e5468

                                                                                                                                                                      SHA512

                                                                                                                                                                      2370039c44cbc7a56c613c50acd6c874020fd67f4d8e8d936633a965d46eefb7e219b26108b55f64ba6458ecb6f89819180e5e904bf2326e284d60810665fb5e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      713B

                                                                                                                                                                      MD5

                                                                                                                                                                      76f162275f064f5ee87c56c53cf83fdc

                                                                                                                                                                      SHA1

                                                                                                                                                                      24984db1a06072e4ad86446f1266416ea439697f

                                                                                                                                                                      SHA256

                                                                                                                                                                      088bba5cb0e8823c1c85390e3242c3bd7f572e15a7c1fcfc6a87d4f24b81b1fc

                                                                                                                                                                      SHA512

                                                                                                                                                                      ffeeeee81d827b27ccc71f4975866f53896b953701525ae2e5b8a8ee081895ea294906bddcbb3bb60ab28463d7f29d2f715462c1b7a02215e3fceab0476e10f4

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      f2ab13acaa281917fd0a358a8d47ccfa

                                                                                                                                                                      SHA1

                                                                                                                                                                      edcd49cf7bdb5ef508fbd9db279aed018711ab94

                                                                                                                                                                      SHA256

                                                                                                                                                                      381e69badfdbf987982ad1fc8339b45bc0a9b441428dd5c27ea089281fc31eec

                                                                                                                                                                      SHA512

                                                                                                                                                                      775f4037b44e8fb4c78a1fdf63ce7227c46aa3b7d41e2609ff56ae04b86d71085577ef9f1863266fc5117a26391d11688fbb98cff63b46f8a14a1f812fe3c72b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ff13dcbf3cf4a3f85c268ebd4264290f

                                                                                                                                                                      SHA1

                                                                                                                                                                      b7d0046379630424144a1110e5961d8f46714a03

                                                                                                                                                                      SHA256

                                                                                                                                                                      09d3a363e9445258c65e0794f71b2ed7d1a5d8436ff125798be343cea8e62823

                                                                                                                                                                      SHA512

                                                                                                                                                                      142a459fd93e41703ee369345964fb2191ad744f6f5d8767821eac0bb96eaa043c834bdcf40a07b1e16624ce2174a3db00d26a53bc8a1e6e477ee1459e2db5b6

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      7c72cfb0e5abb0d0541a1f1b06589ce6

                                                                                                                                                                      SHA1

                                                                                                                                                                      4278a51912d8c1fe6461ef508db098af3e504679

                                                                                                                                                                      SHA256

                                                                                                                                                                      8dd6732a51b0e17f54a0f1e747b362fbc94e5508bfecf82acdf1dff0b756e2e3

                                                                                                                                                                      SHA512

                                                                                                                                                                      931b4bee1894326fdbe0da8ae80001769a19562c23c254da896ac1c3ef4b6ee43125327c963d416c988727c05ee85d119ed510a7c65958b694b0cefaaa421e46

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                      Filesize

                                                                                                                                                                      5KB

                                                                                                                                                                      MD5

                                                                                                                                                                      7cd880f3101b6a342112909370481683

                                                                                                                                                                      SHA1

                                                                                                                                                                      b817bf2536b08d8b34385d943eb551c88ce8c2ad

                                                                                                                                                                      SHA256

                                                                                                                                                                      1043edba3b25d7ff59520bc18b260b785660c47e6be7eb496145785e178e4ab0

                                                                                                                                                                      SHA512

                                                                                                                                                                      87c98280ab920b77f48a5682544324e8353426d66024da5b72a30d3ff2fa38eaa8a3add6062ba92860f33989e374a08bf21035abe94c0228cff56412958005d2

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      5KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ea00992cefadda04e28c28313a527321

                                                                                                                                                                      SHA1

                                                                                                                                                                      feecfdd9a42068570609f2f4fbdf6049ea515c69

                                                                                                                                                                      SHA256

                                                                                                                                                                      c13392568a6e5d22e81eabb11f9774ce13d8d1a091ae2ad378420be00a1df305

                                                                                                                                                                      SHA512

                                                                                                                                                                      2cd96b22cbd8d0deff1cfd0883ee25af2e9c27eea7360b191130b6f184e7aec8f39ee1131fa3ca4ea9425a1c50e097a7c751d647b28d6686f59e64fcf46b4f0e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      6KB

                                                                                                                                                                      MD5

                                                                                                                                                                      dffa7eb55c887922243ec1d66e05b849

                                                                                                                                                                      SHA1

                                                                                                                                                                      fb5912cc8160d47749bbfd964fe6aa721e8578c9

                                                                                                                                                                      SHA256

                                                                                                                                                                      b9f1854a8b081d13edb34239cd313bacb19ca47add3047d4affaa1db44976c65

                                                                                                                                                                      SHA512

                                                                                                                                                                      c1c0d7e6aa55087747006f436be080af3dd156740fe3135facbff3d87a3b5262fb733dcc29f6550a1174b4733629759cbcf0fda3331f8adab9a7fea6ed566abd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      8KB

                                                                                                                                                                      MD5

                                                                                                                                                                      fb7c44340fc016ff953f48b486303b95

                                                                                                                                                                      SHA1

                                                                                                                                                                      62d90db3eda61a78601e6766ed1fa9d4ff585ab1

                                                                                                                                                                      SHA256

                                                                                                                                                                      4c57034f224863a01f8b7976a057a2a4fc2a4ddd708d68e4dcd1d292cd115d36

                                                                                                                                                                      SHA512

                                                                                                                                                                      d4253d8a782ccf8582bbfbe5397bee58337444665238706361dbe2b26dae1dc10e7b591884a87cec27b37773b4242735f46bd05b25186d59a7700f1b73bca461

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      8KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ad87f316c962f79b30331609f0b34387

                                                                                                                                                                      SHA1

                                                                                                                                                                      2f538ef3aaa535daedf1ae8ff3971b8f2d1da3fc

                                                                                                                                                                      SHA256

                                                                                                                                                                      4deb5f9da45d0a3303bfe444dbfa292eaaf1bad0edf7ab49f7ea63ae08dfecef

                                                                                                                                                                      SHA512

                                                                                                                                                                      938640b3766c5948ddbd0e174e8a593bd3d48f593cd57f4b890df4e1865438c63c7379398c3da7cf82705a16f60b10f1766e658b29d424fe71cfcae680d135b8

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      9KB

                                                                                                                                                                      MD5

                                                                                                                                                                      753723939e91ab57899cdbc41bb7aef1

                                                                                                                                                                      SHA1

                                                                                                                                                                      a3c5192b5d5bea485035deb9efff8ff99a19ec58

                                                                                                                                                                      SHA256

                                                                                                                                                                      0b8bbbdf4fe57be591494566117a9ecf151e99dfbbf5f6d17853389c634b48dc

                                                                                                                                                                      SHA512

                                                                                                                                                                      b6c3dc6ea103d75e4df8bb7e3565dd5ab0c258d338cbec60aa7f01b89a465ce11d59b81a602e8892fd652c9803950b46907fe5af122e6e8af85ffaca20dfd067

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      5KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ee2b43a80048ff98987bbd0c78a9380c

                                                                                                                                                                      SHA1

                                                                                                                                                                      338def533953e3c12d49b169eef39a187fe4ef32

                                                                                                                                                                      SHA256

                                                                                                                                                                      96cf68e93614500d2b034afcc049650b14be3bd5bc014c849e63b6a474a2a78a

                                                                                                                                                                      SHA512

                                                                                                                                                                      25622022610ba37275e1298c4bebd758b3ba6971a7c6fb5878a687a8fb9ac0cd307388e3ff47b3c0182c5520fe5d0be7aa1ebfe8cd3956ecc61fcbb8f680f6d9

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      6KB

                                                                                                                                                                      MD5

                                                                                                                                                                      6832071c215539213fd7bbf589b4b99e

                                                                                                                                                                      SHA1

                                                                                                                                                                      cd8af94ebf20cc73f68d2461deca8ac707f21c7b

                                                                                                                                                                      SHA256

                                                                                                                                                                      993ae179d802500200dd02dee42ef25e2c55d5e07f3f11c873d2af4a43aa7141

                                                                                                                                                                      SHA512

                                                                                                                                                                      68ab4251c4f27ccc95a490c029c797fe187e0556dd3e0fd2dfe957fdecd991d902523074b2fca286989292df2dce0056fe965f64b3371f6e52979e36b6814911

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      4dc7742e7aa04ede2fc5eb2de9826376

                                                                                                                                                                      SHA1

                                                                                                                                                                      ab81568fb972cb0fe99220b4c2b1552d7b3bfbae

                                                                                                                                                                      SHA256

                                                                                                                                                                      1cd5d0adba9f8d135c0bcbb8cd7ec13c4107006fea6674eac1fa030c751d3f3a

                                                                                                                                                                      SHA512

                                                                                                                                                                      5a4b3836c76415ba688ae99c45833154d0ddb3e28769e122c08b9b6dfcb4f99ddaffa35c2c8e8b2ffbf0e1bbd80fb7213910a432a700fe1d08688d4f79d55de6

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      333498f476402a477f299a5797f36e46

                                                                                                                                                                      SHA1

                                                                                                                                                                      dcbdacc670a8c0065d4c894522b1c03003a1e957

                                                                                                                                                                      SHA256

                                                                                                                                                                      6092e703224e883bf32b6bd2effcbfe6541768bac18619116fa9c02f7105877c

                                                                                                                                                                      SHA512

                                                                                                                                                                      b9013554e686df9691490945dc0f2e13af10af4ddf9c52d64e470deacabf27ed3262a930afa1dd373ba9652f0e7f734aa189ecceb23c43aefb3aa2ccb2ce67ad

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      5a95d6e5635824242bc20f1a6e744b95

                                                                                                                                                                      SHA1

                                                                                                                                                                      a977c6d8fc5fee9cbc12000b29d837ac2400c83c

                                                                                                                                                                      SHA256

                                                                                                                                                                      7e3774b50aa3b519833ba801361844d12f2d1e890646ab93f324dd9ad9767e3d

                                                                                                                                                                      SHA512

                                                                                                                                                                      023f186f2d6aa3f1844dc7c89b2ad6a26714ab787817ebc2211d00415c52d8523a2c4d40a1a8f46b82314dbd6fa47047a0eb427b44e22005650e5f3be1e54417

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      10710f57441c8aefd92829274b048f6a

                                                                                                                                                                      SHA1

                                                                                                                                                                      360a30ddc6e2f63375d0f5ab9d0448f9ff3a6552

                                                                                                                                                                      SHA256

                                                                                                                                                                      4ec49a4678724f987aeaf7d64789e82e592b9f10854210f296458c5bb37c24a0

                                                                                                                                                                      SHA512

                                                                                                                                                                      7ed9803058e4e11ce6ad1c1a5c420f9899ef62681b5c3d0d6fc6c8607a2927c0359cd2a8cd990a1d3705576ba16600b84ef5ce98753269aa7e597421f23b6012

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      a3215300c05f0ea074a71d914217984d

                                                                                                                                                                      SHA1

                                                                                                                                                                      0eb6ec12f4e295269bdf7b26e39ee7698ef8ec7e

                                                                                                                                                                      SHA256

                                                                                                                                                                      3beb5426adfca0b4661fe68a8f5135f5b1706616fe98ab85b030ad13fd5ea808

                                                                                                                                                                      SHA512

                                                                                                                                                                      e616f3cfcf4ef035ad3c2b91e3258fc92c3d13c52bf3f378b5fc7e467713d8028a10931b14add9228604cea3a469744f9409492e451a51482110b085ab54a535

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      ce54a183b4f8f60613c9c2869650efb3

                                                                                                                                                                      SHA1

                                                                                                                                                                      863805f48a7f14a9ef23aa7b700532202546e734

                                                                                                                                                                      SHA256

                                                                                                                                                                      4b3829352cc894ac9670448f0322784e6b9765218b88c168a1212fa80b57b8e1

                                                                                                                                                                      SHA512

                                                                                                                                                                      67a9018d5e0b7ecde3492a3003b449d5fd61eed6c0babaf53751f8c6f86623852ac8d556842084636fa4442f5498d4b288c89ab3e0ca6b67d442effb95d64982

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      c176926c61d0c035cd7b59607d488de6

                                                                                                                                                                      SHA1

                                                                                                                                                                      38bbcc8df6eb98df0edb8b95732b0cb6ac957072

                                                                                                                                                                      SHA256

                                                                                                                                                                      6c4919d43f5b07b23cf2de49c3614dd56cc83a945dbdc8773d7a679e60c0cfae

                                                                                                                                                                      SHA512

                                                                                                                                                                      3e44452f055cc8665b9ee77efc6bad26693dec030126634b8e4d9eb2daf40f0cdedc132881a05ad9657eab5456a6802dd326127a9082326f637dd942ac9343d7

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      3a5172aef0983c00e0d4d630b991e41a

                                                                                                                                                                      SHA1

                                                                                                                                                                      4cfe27bde11cdf5e34d5a3efcbc499f6861c688c

                                                                                                                                                                      SHA256

                                                                                                                                                                      fc0c5ad1af7f9edaac8ecc9f9d9cc032c322266cbc53efd17aa872897f036c8f

                                                                                                                                                                      SHA512

                                                                                                                                                                      0e16c9f40207f0a1ab2a2e64df6368b900712eee087c0d312d255f8061276098e10c32e2eed779db71a2b1c6fe3bcd99ddbbbd31ba2e90c7bfbae87929dec016

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      c933bbb367954f4ba726d192d04c4a73

                                                                                                                                                                      SHA1

                                                                                                                                                                      81e373aa2b279e8907d557b17a90c7fc529ca552

                                                                                                                                                                      SHA256

                                                                                                                                                                      16f13a6c58f19c34cc595faa5b13660fe47eaac255ae1b911200dcaadf155837

                                                                                                                                                                      SHA512

                                                                                                                                                                      aca1785d8733694154cdddb887dda7230c4724c182035ce444fee2d39867327ca3bed565545a7dcf6f01666f6f86b9ac08f032a84dbacf034ac145a4061a2964

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      8b88b6dabec523bffd80c9455b3db3ed

                                                                                                                                                                      SHA1

                                                                                                                                                                      783a611a54d01cbb337e116fcc7bde8622538454

                                                                                                                                                                      SHA256

                                                                                                                                                                      c744e0ec648976e3b93a08e6a287364dbea6ceb8f70f8aa1d0f8c6381a8a82df

                                                                                                                                                                      SHA512

                                                                                                                                                                      9adfb1108915af5cd08852c3997f90d4e2787ebb3c79080a48201dfaf87976216620b18ed536f2224697033a4d2aa7f181c700bd6c19ddae6cce349e858e51c2

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      1KB

                                                                                                                                                                      MD5

                                                                                                                                                                      518ee679d282447679d90e8bee782fc3

                                                                                                                                                                      SHA1

                                                                                                                                                                      c83f14491a0c5d623088ce94dd30c08a066882fd

                                                                                                                                                                      SHA256

                                                                                                                                                                      ba4430c410815a471af1a8ea2ad8fa9a82e9f0b7f4abfee9bdafbed98f98fbfe

                                                                                                                                                                      SHA512

                                                                                                                                                                      a023ccec0877a83e7e5e5fd3c43329a2790fd8fd97cc304f3b48ebd32e55730f1d0b49446e9564f5b5361bc4403c49f72f9155a2a3d656605e06b863f101a9b1

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      1KB

                                                                                                                                                                      MD5

                                                                                                                                                                      be6a07af37ba0dfbedf805e59bc1cf45

                                                                                                                                                                      SHA1

                                                                                                                                                                      a3bd0d158c2a4548145e0ea7c5455ef492c55c4c

                                                                                                                                                                      SHA256

                                                                                                                                                                      8ca58ee087158a03a4c44c449b6e96b0493473343b3730f5e7e43dbd3ff2fbfd

                                                                                                                                                                      SHA512

                                                                                                                                                                      e29f0ebda9262fe6e8552ffffdd8ca3a915e38753752d5f983f649f34b34ca5729f7b058387d5c9acc3834966ba59204b8c34adc124e405799e6663daf15932c

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      02beeb339e8edd91e1500bf305bbd4a6

                                                                                                                                                                      SHA1

                                                                                                                                                                      db0f64edc84a41200547b9394184c13fbf85ff90

                                                                                                                                                                      SHA256

                                                                                                                                                                      3dcf6aafd048381654802a1ce48bbe5ceced819866ed64b4961289c414eaa84d

                                                                                                                                                                      SHA512

                                                                                                                                                                      631602e0887dd713d74832eb5517676b34986084aba6643c3dc811350ceca7e06e7ef761b70c03a5c43d4fb26f7c02450c56e0e3fc665887516a0f69382620e6

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      c22ba9c055e0dc6a0ea448040a6b5be9

                                                                                                                                                                      SHA1

                                                                                                                                                                      e7d25069b0f1b69df62db30671a8a10c3e0a0d7e

                                                                                                                                                                      SHA256

                                                                                                                                                                      58e000db9959945d79949c8e02c68d9e8f7aa2fc10887a9b39149e009229e314

                                                                                                                                                                      SHA512

                                                                                                                                                                      b7f82401ed75c52add173536dfe38ba073b9757785ecd881881656e2dfc0b82532e085a42fb981eb386c3ae04de388933e79900cd8348d17d08f18e53991be95

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      e5f8491965bccd0ae2f916b7f79d2b48

                                                                                                                                                                      SHA1

                                                                                                                                                                      223d51652d1531eea13babcdd45f42c2c0508d27

                                                                                                                                                                      SHA256

                                                                                                                                                                      a78bd1f19219919bb6e39fb85235f6387bd13d9ef06c774f8531013ad35a282a

                                                                                                                                                                      SHA512

                                                                                                                                                                      0195242573df393cfbe50ffe4e397abc1a75208153bf7fd14505be12760a1288e269b1f32c7f16a4c0dfe9a151f6e77b168737861dafe811698ab831e4a9c1db

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      2ecece5791f2015216965b4232585182

                                                                                                                                                                      SHA1

                                                                                                                                                                      befb368e416ba6ba4b00f184d8cb6b43d91ae914

                                                                                                                                                                      SHA256

                                                                                                                                                                      1c9da2fee0c109513153bcafda5dff52e0360af53dea9b6b4adbebafdf800b84

                                                                                                                                                                      SHA512

                                                                                                                                                                      7466fc0ee3e14a30b92b7b74ad3883996331525f9e46c59c36da641980d9aca00b89c6ae23b6bdd139d2c645cd9692cbb7666e1515cf55abe333bb55ccbca2b5

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      46a98753edfc24515ee9d98a01e6976f

                                                                                                                                                                      SHA1

                                                                                                                                                                      398b3326382f2f1a845dae8c7b84f66fd5ae562a

                                                                                                                                                                      SHA256

                                                                                                                                                                      3634b4d511c71c92b5fd2eb48e18791155c4c3e62a8ebfb89325d443546b263e

                                                                                                                                                                      SHA512

                                                                                                                                                                      be760f34da2c86042e2d43aef645d3ad03f187bf16da33061b80593579e5864d25bbe8a81125f02c1482e9a5d35a9548a44ef024ee1e188157708b94d26538a0

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      13f76b9f944825200e5a23e8cc19ee93

                                                                                                                                                                      SHA1

                                                                                                                                                                      a0e7b9441eb492f94c960c36cedd309b6d6e4f3d

                                                                                                                                                                      SHA256

                                                                                                                                                                      e7bce8c103d8a90191d142f3badbf5932581a6b0699b062da0dd28bdc85f66a4

                                                                                                                                                                      SHA512

                                                                                                                                                                      67a93c12ccc9ccf99a721b0c214b1b6d43b95af6ad4b4e230062e588ad19a6953a52e9ce3fb33ab1d907bd0636329e265aebb9a3ffa8376331bf9cb0d32ff798

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      1a37b2e2e0a6e17facd155d3089f1fbd

                                                                                                                                                                      SHA1

                                                                                                                                                                      ed0e98b4d772d4ac05799aefd387d9b3ddb23938

                                                                                                                                                                      SHA256

                                                                                                                                                                      dc578a79c7545c37c1f919f6a1695419c8f5d14c24ac57f8c37c1b5518c62150

                                                                                                                                                                      SHA512

                                                                                                                                                                      d7478c96202aed1e5b5106a31c4393f768c1d9cef46d373f2c7191dc6eb27a23385734588f5404d778a94553e8d659ccd8a8b48f127309dedaa8155e376dd747

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      6c6db1a6e9bfc5658dc7375d951aaccf

                                                                                                                                                                      SHA1

                                                                                                                                                                      f2574a8d9d01ac89e3218221aa466c8fe0581306

                                                                                                                                                                      SHA256

                                                                                                                                                                      d57afabab476558ee89c3ffd3f40a59efd7e76567b4950c387215728fb5ef2eb

                                                                                                                                                                      SHA512

                                                                                                                                                                      6ea88f2f5a6c5092188a0e0c7d30cb4ff418fe38dec6cdc04da4f4be543c9143a6c1a58e77f104c6f54ff8347fc0644d12614568ce86944b19809fc125e35754

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      446fc4f49d7a29103465061155aa6a03

                                                                                                                                                                      SHA1

                                                                                                                                                                      9c99919e4a85dafcf183bd73d4d3936650373a49

                                                                                                                                                                      SHA256

                                                                                                                                                                      97a4b5145828e0843ce37bc2978ab962ed96326998eb247765f53b811fe2ca95

                                                                                                                                                                      SHA512

                                                                                                                                                                      ad304e1cd8344fa9b5bde1f68925c7e7a41beb3d199c81bdc1e9ba6aa9902ab39345f8a37d17ee725c6937afb12276ee01524b5050c4763ff19274a8e527a0d8

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      95e1bf183237e455b8f2804a18507b91

                                                                                                                                                                      SHA1

                                                                                                                                                                      399d55c083364ddc69f452beaee5075c5bcbc4a6

                                                                                                                                                                      SHA256

                                                                                                                                                                      03aa26b51f9f69c165178e7ec9375d929501d00d22cedad5cca3fb168cd42aa2

                                                                                                                                                                      SHA512

                                                                                                                                                                      81f97c72b26f9f2e32de48fd7b7fa5cc85b83d59c4b68c12800bc2612999622ef8ee3dc77b9909393bc9288b13572ccaa9ce4142fa0e14dafd401d48b6b5f3bc

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      625b0e0375f8b1b40afb8222be181b00

                                                                                                                                                                      SHA1

                                                                                                                                                                      fefe83830727b87774f9520d786857c5a483c4db

                                                                                                                                                                      SHA256

                                                                                                                                                                      976d4a264b625e267e3693bebfca9de3c3bdf6a6e81bf7a5083ed1a9084df6aa

                                                                                                                                                                      SHA512

                                                                                                                                                                      4486f5e6cdfe8d0f2629c1041106de28e8137bf6cbff7befd9208da8aad9f2cfa1a1794fee31f7d1447fc9abe65b9e4ee2bdf5b50bab6b9852079c95514946cd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      9a5c4a2f350e95c112abb1456953afd3

                                                                                                                                                                      SHA1

                                                                                                                                                                      891a01f3e57dd3d14b576e26d65320a347e678f6

                                                                                                                                                                      SHA256

                                                                                                                                                                      d9849f64bf029da7bdfe1e1fff01df388a46fad4d8b6ec6321929566a578594d

                                                                                                                                                                      SHA512

                                                                                                                                                                      be9f090601d7f96231481bee8f8e0d36625ee82d0354ee70bdcb7553f1eec78f6a3e6b3a9c75ece6228e2f3d797c0c39b245786049de51e3cca818115d38f3d3

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      8450e750b6b7badd2c3e6cf8b2feac3e

                                                                                                                                                                      SHA1

                                                                                                                                                                      0bb1441af7482e57e3cf7e7943a5ead70514df81

                                                                                                                                                                      SHA256

                                                                                                                                                                      857c4d75e93d1b659cf7573028491da18d3043c80ac54bd37d7cbd467996fa05

                                                                                                                                                                      SHA512

                                                                                                                                                                      03682a59f0d6bc543d4fb54ad456acc629d64f564b0bf1f240e3e0a68735ec6df3a42183a12f947e63daf2b52792df1f5254848e1d6cbec38d16d9760fc08daa

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      bc17e708676f74ad373cd6358e65ac7c

                                                                                                                                                                      SHA1

                                                                                                                                                                      9bca48e730ddfbae357bd82c855a4293f7319836

                                                                                                                                                                      SHA256

                                                                                                                                                                      7327c23f83baf9e7831d2b48197ffa8b351b0fc41ba4f7fd8edcca1aaed26ad6

                                                                                                                                                                      SHA512

                                                                                                                                                                      e19cc659106823ad9438a41cbda550f8f1b8b4b9dd067d1b24b9625acd89334e8777f0241c30e0b3df6cb572a57e4c9cd4cdb87b22527fec12a3683b0750e60a

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                      Filesize

                                                                                                                                                                      3KB

                                                                                                                                                                      MD5

                                                                                                                                                                      16900db9e70a8432797240d80f57c2e3

                                                                                                                                                                      SHA1

                                                                                                                                                                      4ef47c83a350b9fde17995ae8385bbdffc3b30a9

                                                                                                                                                                      SHA256

                                                                                                                                                                      01be802ea1ca93fd78f4649f93d8988f2a74979b71f824393e10a64c910889d0

                                                                                                                                                                      SHA512

                                                                                                                                                                      f02d029fc9d7601bbe5aede8d761baab99f8d63f99ca3bcda2ea18843feb7602c0c121387cb2b525c0a00e649b04e0bf6308540c1b51d9a53ec4a931400b7d9f

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5881be.TMP
                                                                                                                                                                      Filesize

                                                                                                                                                                      1KB

                                                                                                                                                                      MD5

                                                                                                                                                                      e5d66db4a305c287eded5b8efb1c914d

                                                                                                                                                                      SHA1

                                                                                                                                                                      14699ec5e9891ce7111de1ba7046c67d49d0642d

                                                                                                                                                                      SHA256

                                                                                                                                                                      4c1559a824222c2dae872827db0f53dc198ded36b11f39cd8e96b2802849a533

                                                                                                                                                                      SHA512

                                                                                                                                                                      a892ecffe016897e74b4de871460370ebfe1e4fdff51f25385b33fc77edf6bea4d2dbd802f65bc5159456a8dfd6431fb69451199f9d46f05fb84a7ca589d9a38

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2424b21-8530-4a6b-8762-cd20b173d3d1.tmp
                                                                                                                                                                      Filesize

                                                                                                                                                                      1B

                                                                                                                                                                      MD5

                                                                                                                                                                      5058f1af8388633f609cadb75a75dc9d

                                                                                                                                                                      SHA1

                                                                                                                                                                      3a52ce780950d4d969792a2559cd519d7ee8c727

                                                                                                                                                                      SHA256

                                                                                                                                                                      cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

                                                                                                                                                                      SHA512

                                                                                                                                                                      0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                                                      Filesize

                                                                                                                                                                      16B

                                                                                                                                                                      MD5

                                                                                                                                                                      46295cac801e5d4857d09837238a6394

                                                                                                                                                                      SHA1

                                                                                                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                                                      SHA256

                                                                                                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                                                      SHA512

                                                                                                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                                                      Filesize

                                                                                                                                                                      16B

                                                                                                                                                                      MD5

                                                                                                                                                                      206702161f94c5cd39fadd03f4014d98

                                                                                                                                                                      SHA1

                                                                                                                                                                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                                                                                                      SHA256

                                                                                                                                                                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                                                                                                      SHA512

                                                                                                                                                                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                                                      Filesize

                                                                                                                                                                      16B

                                                                                                                                                                      MD5

                                                                                                                                                                      6752a1d65b201c13b62ea44016eb221f

                                                                                                                                                                      SHA1

                                                                                                                                                                      58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                                                      SHA256

                                                                                                                                                                      0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                                                      SHA512

                                                                                                                                                                      9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      990f6c0513e3f4f581764d3e5e934ec8

                                                                                                                                                                      SHA1

                                                                                                                                                                      e6f173948425146763ec7c9f4b5afee05a012a83

                                                                                                                                                                      SHA256

                                                                                                                                                                      c260d40180883e689f73186a797ed14a9f297b5090f3483e1cf5d941b30c5c80

                                                                                                                                                                      SHA512

                                                                                                                                                                      951847d200668c9fcc86a6d05d1fdf126f38961ce3794b46df35a93ba15a1dec3b09041762e8a20c33cb114d4210211b2509236b8f64e1cd586ccbce2578cc84

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      503cdd310cfda99484ec5b3980a0b994

                                                                                                                                                                      SHA1

                                                                                                                                                                      bf5e865756e38ac17da1ffae5d5164e2d7051a0d

                                                                                                                                                                      SHA256

                                                                                                                                                                      b82c3e37b66ef88436f7cc6cbaa687f1af4bc4c6a0e7d8c7a6b259be8918e761

                                                                                                                                                                      SHA512

                                                                                                                                                                      b2bc67b805844f8b9b8c7a84ef1b8cdfc23e31a98f2786279117eb6333278edcf8bef90589fda9974167288eb47662521ead9c0daf992cea5209fb58209351d3

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      1d87b37eace51d39b38e48042720de3c

                                                                                                                                                                      SHA1

                                                                                                                                                                      b6ea1babfe9886bd008f51405aa66fd0597b267d

                                                                                                                                                                      SHA256

                                                                                                                                                                      6dc4f04410afbefc691f08392182faf08ad34544d7ef1011d99e02f0ba83901d

                                                                                                                                                                      SHA512

                                                                                                                                                                      452fa1f3c6df00adb40255f24de99a3e5aae7f080ba8c1bcfe6fdf7a2871e3dd9275307012276140f9742c4d1c1313a2a7c9cf774f09df3b9e23619d6d602ca3

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      e0574c17fefdef464c41931fb3f668f2

                                                                                                                                                                      SHA1

                                                                                                                                                                      d73d4e6e4b0bce20c3699ad0f5d2b01c3f57aa92

                                                                                                                                                                      SHA256

                                                                                                                                                                      3dc66129644682764b48c6a72aa53a679ba5293098b4eae904a57d4beabc0256

                                                                                                                                                                      SHA512

                                                                                                                                                                      1055eb91ff14783bd2fbb16968c21db226e3aadc538d11dc262f8fbb6a44e91e2686e05e68c4dcc93c1e02549af54159c060236f8f41678fefe429cbc6716693

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      d978f5add7aa43a8225ca5b41c985e44

                                                                                                                                                                      SHA1

                                                                                                                                                                      35e2f0165488590767f9171b45544b42a229ea96

                                                                                                                                                                      SHA256

                                                                                                                                                                      98a68e47c18ed60a80e305b1291cece3184bfc3b9d0191057199d823b464efef

                                                                                                                                                                      SHA512

                                                                                                                                                                      7306c1ef22178b0c6d8fd6e16aadde0a5a67aa811b2da88310be6fe5eda7c6e8533b91a8aaa0f240e2a9ac97ebf182ca619959962bec43f8a17f2141e6dfdc21

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      869a4178050155e90c2f21e225b22fe7

                                                                                                                                                                      SHA1

                                                                                                                                                                      b1094bfa959f3ce81c5328bd0c095bbb88bb7941

                                                                                                                                                                      SHA256

                                                                                                                                                                      3debf9f57bbc7bf9a152fab621e8e9bb8b46867e84ed6b4e5a87387ad00992a2

                                                                                                                                                                      SHA512

                                                                                                                                                                      114fbaec62120d55a44a80a65b063e587c0258a84e82ff89b9e94f0af37979336229ccbf777f865339a92ac6a912f79f096d197c9f5cbad819a4a0cd4c0a4549

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      856696ad88124f3d9c6f839a8b1ff4c6

                                                                                                                                                                      SHA1

                                                                                                                                                                      7ada49cada58aa48f5103624103c13783f4761a1

                                                                                                                                                                      SHA256

                                                                                                                                                                      24a890d8fa49befd5bfa90ca53de54cc7fe4e1b6cf9de100ce5bdf57f5f1a3b2

                                                                                                                                                                      SHA512

                                                                                                                                                                      d9192915f24fd73d8096496700fc103cba3d83e2165786fc1675fe17f58126f501d62300de6f81df2bb8c689189bbe98f91e0eb2a384ec417eeb25c9b8f3d4b5

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      000c9059dc71b8066a941b9aa70a102b

                                                                                                                                                                      SHA1

                                                                                                                                                                      32439dab77c610b01af79ad782487089149dca91

                                                                                                                                                                      SHA256

                                                                                                                                                                      cb2de8345ed8ddcc1b1cf714f781cd842c7c7d44deeb7b18ce843abb51e9d7eb

                                                                                                                                                                      SHA512

                                                                                                                                                                      c7b3ed9fc4c5ab48a11795bbaad8e72ff3a3ea97b90ae60499a89ca903005b5c8fe496544e1c558ec823a816c618baf106bfc85699c3421585ae0b411ab6d88f

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      153f003b1b65fbe4d990e04285703831

                                                                                                                                                                      SHA1

                                                                                                                                                                      3e1169b130ca0a0cd9a5d695a0058c9bdb4e47d5

                                                                                                                                                                      SHA256

                                                                                                                                                                      a628b5ee10b80f1ed4e38ced62f25e4df57bee33fd1c9ffb0b91879579dff68d

                                                                                                                                                                      SHA512

                                                                                                                                                                      db536ea237e6522cb2852c73b1931b685427f4ddc3b1077fc94eda901e9d4f1729ecfebcb74f84d167cd7c0af807ff5548f930180ac67cff1dc4dccab115ee65

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      50f1325807b0585b77ab4b8ec8dc300d

                                                                                                                                                                      SHA1

                                                                                                                                                                      147b53ad23f4c82e97d5b3a5fd1239a582c5d993

                                                                                                                                                                      SHA256

                                                                                                                                                                      30f22c432b9ec5389626539bd2f40d23da38e16b6c0ddeebb3b571382f06b3c5

                                                                                                                                                                      SHA512

                                                                                                                                                                      a23fc1dba37936cd214acc1afeb2f018e206bde98e826037079fe44f352301374b3ad1d9ec21e7b0a46c1dc267777a356f68d4f5105a30097694d479735d6837

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                                                                                                                                                                      Filesize

                                                                                                                                                                      10KB

                                                                                                                                                                      MD5

                                                                                                                                                                      d12e797f18cb79137ad12b5e5139e1b8

                                                                                                                                                                      SHA1

                                                                                                                                                                      f15fb437b1be86b714e278ce927b315fa0e16ea3

                                                                                                                                                                      SHA256

                                                                                                                                                                      afb0f4a0229174f8118ab512b569fdb9eb3ebb0389cb11c9f4a0a2aa88ec258b

                                                                                                                                                                      SHA512

                                                                                                                                                                      f6e8f99bcd0ecff7683c8e56fa2ffa3fdff16d6c17a2066b36bc3d78e2838130b5b23059a239b29a7ebdd0b5ca36b3f9cf388945bf1aad50a3f91cb8091223cd

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\BgWorker.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      2KB

                                                                                                                                                                      MD5

                                                                                                                                                                      33ec04738007e665059cf40bc0f0c22b

                                                                                                                                                                      SHA1

                                                                                                                                                                      4196759a922e333d9b17bda5369f14c33cd5e3bc

                                                                                                                                                                      SHA256

                                                                                                                                                                      50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

                                                                                                                                                                      SHA512

                                                                                                                                                                      2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\System.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      11KB

                                                                                                                                                                      MD5

                                                                                                                                                                      bf712f32249029466fa86756f5546950

                                                                                                                                                                      SHA1

                                                                                                                                                                      75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

                                                                                                                                                                      SHA256

                                                                                                                                                                      7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

                                                                                                                                                                      SHA512

                                                                                                                                                                      13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\nsNiuniuSkin.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      904KB

                                                                                                                                                                      MD5

                                                                                                                                                                      00b5a327b44faaaf7fc373176cd454ed

                                                                                                                                                                      SHA1

                                                                                                                                                                      e58ea8e7de259f5d577c01eeac28cc8f72b65094

                                                                                                                                                                      SHA256

                                                                                                                                                                      f125ed6489f16f1681ea92e30f6670f72e0951cd7948df9a043e04ee512ccbeb

                                                                                                                                                                      SHA512

                                                                                                                                                                      a7c5955652e1dd6f33e6596f0861a2127e4a259ae7abd256a44b3ffc36c1861e29fe3e9a2b60aa5a0230430411c737ef2b2e9170e4f0f42f737039451326340a

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\nsProcess.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      4KB

                                                                                                                                                                      MD5

                                                                                                                                                                      88d3e48d1c1a051c702d47046ade7b4c

                                                                                                                                                                      SHA1

                                                                                                                                                                      8fc805a8b7900b6ba895d1b809a9f3ad4c730d23

                                                                                                                                                                      SHA256

                                                                                                                                                                      51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257

                                                                                                                                                                      SHA512

                                                                                                                                                                      83299dd948b40b4e2c226256d018716dbacfa739d8e882131c7f4c028c0913bc4ed9d770deb252931f3d4890f8f385bd43dcf2a5bfe5b922ec35f4b3144247a7

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\nsis7zU.dll
                                                                                                                                                                      Filesize

                                                                                                                                                                      313KB

                                                                                                                                                                      MD5

                                                                                                                                                                      06a47571ac922f82c098622b2f5f6f63

                                                                                                                                                                      SHA1

                                                                                                                                                                      8a581c33b7f2029c41edaad55d024fc0d2d7c427

                                                                                                                                                                      SHA256

                                                                                                                                                                      e4ab3064f2e094910ae80104ef9d371ccb74ebbeeed592582cf099acd83f5fe9

                                                                                                                                                                      SHA512

                                                                                                                                                                      04b3d18042f1faa536e1393179f412a5644d2cf691fbc14970f79df5c0594eeedb0826b495807a3243f27aaa0380423c1f975fe857f32e057309bb3f2a529a83

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\nse8797.tmp\skin.zip
                                                                                                                                                                      Filesize

                                                                                                                                                                      105KB

                                                                                                                                                                      MD5

                                                                                                                                                                      c3b9f10b4af875b7138a39457a9e0505

                                                                                                                                                                      SHA1

                                                                                                                                                                      1024522f141dd5e163160c44d964097aa37c7800

                                                                                                                                                                      SHA256

                                                                                                                                                                      428bb7bff14ec54436dc993276cb51da0be0d63b8773bfc627bcdec51af5dd2d

                                                                                                                                                                      SHA512

                                                                                                                                                                      bc1f38580c702ffe4d16a26cd5d99f3822672fad85c17457e9115e1520a690a4fe3cc24f21a7f61a52bb96affa04b192caff72225769de4ef7fee893d386413a

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Documents\ZOMOm22Dm\!WannaDecryptor!.exe.lnk
                                                                                                                                                                      Filesize

                                                                                                                                                                      590B

                                                                                                                                                                      MD5

                                                                                                                                                                      cf29a9675f696ce5110943795495eb7f

                                                                                                                                                                      SHA1

                                                                                                                                                                      e19d4b89ae1f8bcdcff32e5f957781c2270051ee

                                                                                                                                                                      SHA256

                                                                                                                                                                      0944a57b1381930e5a4492792aa4dd86521d7cae0f757fe99ca9eed8b97d378f

                                                                                                                                                                      SHA512

                                                                                                                                                                      5b83354f754b376b3a74b64b79929d8645432488470cb1dca4604df8644f885690c0608536a899f7c9caa6a5eec9e1447479a86fb20816f76fb777be1990ff89

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\!Please Read Me!.txt
                                                                                                                                                                      Filesize

                                                                                                                                                                      797B

                                                                                                                                                                      MD5

                                                                                                                                                                      afa18cf4aa2660392111763fb93a8c3d

                                                                                                                                                                      SHA1

                                                                                                                                                                      c219a3654a5f41ce535a09f2a188a464c3f5baf5

                                                                                                                                                                      SHA256

                                                                                                                                                                      227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0

                                                                                                                                                                      SHA512

                                                                                                                                                                      4161f250d59b7d4d4a6c4f16639d66d21b2a9606de956d22ec00bedb006643fedbbb8e4cde9f6c0c977285918648314883ca91f3442d1125593bf2605f2d5c6b

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\CryptoLocker.exe:Zone.Identifier
                                                                                                                                                                      Filesize

                                                                                                                                                                      55B

                                                                                                                                                                      MD5

                                                                                                                                                                      0f98a5550abe0fb880568b1480c96a1c

                                                                                                                                                                      SHA1

                                                                                                                                                                      d2ce9f7057b201d31f79f3aee2225d89f36be07d

                                                                                                                                                                      SHA256

                                                                                                                                                                      2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1

                                                                                                                                                                      SHA512

                                                                                                                                                                      dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\Unconfirmed 176596.crdownload
                                                                                                                                                                      Filesize

                                                                                                                                                                      224KB

                                                                                                                                                                      MD5

                                                                                                                                                                      5c7fb0927db37372da25f270708103a2

                                                                                                                                                                      SHA1

                                                                                                                                                                      120ed9279d85cbfa56e5b7779ffa7162074f7a29

                                                                                                                                                                      SHA256

                                                                                                                                                                      be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844

                                                                                                                                                                      SHA512

                                                                                                                                                                      a15f97fad744ccf5f620e5aabb81f48507327b898a9aa4287051464019e0f89224c484e9691812e166471af9beaddcfc3deb2ba878658761f4800663beef7206

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\Unconfirmed 382973.crdownload:SmartScreen
                                                                                                                                                                      Filesize

                                                                                                                                                                      7B

                                                                                                                                                                      MD5

                                                                                                                                                                      4047530ecbc0170039e76fe1657bdb01

                                                                                                                                                                      SHA1

                                                                                                                                                                      32db7d5e662ebccdd1d71de285f907e3a1c68ac5

                                                                                                                                                                      SHA256

                                                                                                                                                                      82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750

                                                                                                                                                                      SHA512

                                                                                                                                                                      8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\Unconfirmed 914471.crdownload
                                                                                                                                                                      Filesize

                                                                                                                                                                      338KB

                                                                                                                                                                      MD5

                                                                                                                                                                      04fb36199787f2e3e2135611a38321eb

                                                                                                                                                                      SHA1

                                                                                                                                                                      65559245709fe98052eb284577f1fd61c01ad20d

                                                                                                                                                                      SHA256

                                                                                                                                                                      d765e722e295969c0a5c2d90f549db8b89ab617900bf4698db41c7cdad993bb9

                                                                                                                                                                      SHA512

                                                                                                                                                                      533d6603f6e2a77bd1b2c6591a135c4717753d53317c1be06e43774e896d9543bcd0ea6904a0688aa84b2d8424641d68994b1e7dc4aa46d66c36feecb6145444

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\WiseVector_StopX.exe
                                                                                                                                                                      Filesize

                                                                                                                                                                      50.0MB

                                                                                                                                                                      MD5

                                                                                                                                                                      58e84b8a668d9a2a720ab58a753dd266

                                                                                                                                                                      SHA1

                                                                                                                                                                      97fd328e3533cba34cb17cd7ecee6e30f4d39b8c

                                                                                                                                                                      SHA256

                                                                                                                                                                      1a60b743b79c688c04f51195f64887f3399c59a94251e4e74fbb6c919fb9756d

                                                                                                                                                                      SHA512

                                                                                                                                                                      f0e85e45a8023580d6cef3afcb6583993a65ab840735542f6d4bb7519ea375c0c7f87b23487d8511ef78c614c5a000db470c72eccf2bedf985a662375d3cce89

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\WiseVector_StopX.exe:Zone.Identifier
                                                                                                                                                                      Filesize

                                                                                                                                                                      26B

                                                                                                                                                                      MD5

                                                                                                                                                                      fbccf14d504b7b2dbcb5a5bda75bd93b

                                                                                                                                                                      SHA1

                                                                                                                                                                      d59fc84cdd5217c6cf74785703655f78da6b582b

                                                                                                                                                                      SHA256

                                                                                                                                                                      eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                                                                                                                                                                      SHA512

                                                                                                                                                                      aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • C:\Users\Admin\Downloads\u.wry
                                                                                                                                                                      Filesize

                                                                                                                                                                      236KB

                                                                                                                                                                      MD5

                                                                                                                                                                      cf1416074cd7791ab80a18f9e7e219d9

                                                                                                                                                                      SHA1

                                                                                                                                                                      276d2ec82c518d887a8a3608e51c56fa28716ded

                                                                                                                                                                      SHA256

                                                                                                                                                                      78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df

                                                                                                                                                                      SHA512

                                                                                                                                                                      0bb0843a90edacaf1407e6a7273a9fbb896701635e4d9467392b7350ad25a1bec0c1ceef36737b4af5e5841936f4891436eded0533aa3d74c9a54efa42f024c5

                                                                                                                                                                      Download Submit

                                                                                                                                                                    • memory/1032-1312-0x0000000069620000-0x0000000069702000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      904KB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/2108-1245-0x0000000069620000-0x0000000069702000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      904KB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/2300-18055-0x0000000069620000-0x0000000069702000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      904KB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3016-18255-0x0000000010000000-0x0000000010012000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      72KB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1446-0x00000000705A0000-0x0000000073AD4000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      53.2MB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1241-0x00000000705A0000-0x0000000073AD4000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      53.2MB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1239-0x0000000069ED0000-0x0000000069F31000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      388KB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1236-0x0000000069FB0000-0x000000006AFB0000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      16.0MB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1242-0x00000000705A0000-0x0000000073AD4000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      53.2MB

                                                                                                                                                                      Download

                                                                                                                                                                    • memory/3704-1237-0x0000000069F40000-0x0000000069FA2000-memory.dmp

                                                                                                                                                                      Filesize

                                                                                                                                                                      392KB

                                                                                                                                                                      Download