Malware Analysis Report

2025-03-15 04:15

Sample ID 240825-3yaj6svakp
Target http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce
Tags
discovery defense_evasion evasion motw persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce was found to be: Likely malicious.

Malicious Activity Summary

discovery defense_evasion evasion motw persistence phishing privilege_escalation

Modifies Windows Firewall

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Adds Run key to start application

Enumerates connected drives

Drops file in System32 directory

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Program Files directory

Browser Information Discovery

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

Enumerates system info in registry

Scheduled Task/Job: Scheduled Task

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies data under HKEY_USERS

Checks processor information in registry

Suspicious behavior: GetForegroundWindowSpam

Uses Task Scheduler COM API

Modifies registry class

NTFS ADS

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: AddClipboardFormatListener

Modifies Internet Explorer settings

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-25 23:54

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-25 23:54

Reported

2024-08-25 23:57

Platform

win10v2004-20240802-en

Max time kernel

145s

Max time network

127s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce

Signatures

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1216 wrote to memory of 624 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 624 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 1452 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 3820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 3820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1216 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdbe2f46f8,0x7ffdbe2f4708,0x7ffdbe2f4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,3742361338385232447,11296693357207465048,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5008 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 42.56.20.217.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e765f3d75e6b0e4a7119c8b14d47d8da
SHA1 cc9f7c7826c2e1a129e7d98884926076c3714fc0
SHA256 986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89
SHA512 a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

\??\pipe\LOCAL\crashpad_1216_RBRPSLEDXLSIPMEO

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 53bc70ecb115bdbabe67620c416fe9b3
SHA1 af66ec51a13a59639eaf54d62ff3b4f092bb2fc1
SHA256 b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771
SHA512 cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0dd90682ad9461158e7a132d3fc1aca7
SHA1 6ad6d341631fc9809e3b9e817a4a1f62204341a9
SHA256 5b3993b9351d93ab27974410b83532d286e91f1e22814bdd29103465e6d4962c
SHA512 ca9c4e001e1cb2380cb58818e039d0b9509d03f8446e5aef76d3c16c84e0c32dd02965a111fac59c9e28e3c860131e5e91f6839be7904cd8da03c78072e3b166

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b57037dd59ea449112a32f7069922811
SHA1 3ef173e802da61d4961824344b99c47c10aa6e3f
SHA256 39355939e007c459e1f20da8254e0a32cd382d0b655c8403ae6d0436e7c6c95a
SHA512 760c598822dbeab1943c7ccde94b95c15f3e5dcc661343e53d8e052cda263c87425593e75e8031b501517df9d9255495b22da75741e14e1d62f3ede570423e92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 63b4a3b48a11940b8cf54e0fd4d744ea
SHA1 e724f9daeeca83e55c442d4afd8f7dc2366aaf17
SHA256 233647040e848cf299e3bff0ea4218c699c922c6b0a3af0a2cf7f98a606212f7
SHA512 f2e747660df0ea19039f837192f7ec2251707e9153bbb5fd9dc41c7958bbc9bb3eddfebea2cb8f5595e80c03fc27bc7506e404c0b6cc8e18ffc15e8a849d300e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 afc18dcceb87805027aa4bd65e38c6b0
SHA1 40ee09bbb4679727fe8af06d0581026d1e28d0b4
SHA256 aa48bfb5d6853867051a52ee10fcb36b692302b6b8c1b459ff4aff972304767c
SHA512 ccc56f23b8ed4d03040d26a781bf1f49c6fe7f13512880f66be2f2d2fdea0472a8dc181de5391ac8a241c982e1bcf9f8103d37070d1faf27a99d8e7dd9ccaf37

Analysis: behavioral2

Detonation Overview

Submitted

2024-08-25 23:54

Reported

2024-08-26 00:04

Platform

win11-20240802-en

Max time kernel

582s

Max time network

586s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce

Signatures

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000\Software\Microsoft\Windows\CurrentVersion\Run\Free Download Manager = "\"C:\\Program Files\\Softdeluxe\\Free Download Manager\\fdm.exe\" --hidden" C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
File opened (read-only) \??\F: C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Softdeluxe\Free Download Manager\is-I398O.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\impl\is-SSNVP.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Fusion\is-2E5G5.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-A4IB2.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Windows\is-68JFF.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qmltooling\is-0BV94.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\is-4NHNF.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-7U1OF.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Fusion\impl\is-L4V7H.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-03PF2.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-JUT6Q.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Windows\is-SB71H.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Shapes\is-B945S.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-JEM0V.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-TTRC6.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-MJB9V.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\impl\is-V06Q2.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\NativeStyle\controls\is-CUMQR.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-3M3HR.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-UDELC.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-0PD8M.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\impl\is-MJQ0O.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-MPMI4.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\NativeStyle\controls\is-VFRH0.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-J5QEM.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-3O260.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-C4U4J.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\is-E5IM0.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Fusion\is-S89R1.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Fusion\is-5RR2A.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Material\impl\is-P7RT1.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-G26KR.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\translations\is-QOISK.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-1BJR1.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-B4QKT.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-KMPG0.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Windows\is-7H43C.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-4PJ9J.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\impl\is-96ANN.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-R1TDR.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-J803R.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-E5J8R.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Material\is-7140K.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-CGPPG.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-CJ0V8.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\Qt5Compat\GraphicalEffects\is-P8RTI.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQml\WorkerScript\is-GKNCF.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-K5H83.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-G3RBD.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Material\is-ITCNT.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-VCS6E.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\is-17CMD.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\Qt5Compat\GraphicalEffects\is-12AMI.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-DAK7O.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Material\is-C2PFU.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Dialogs\quickimpl\qml\+Imagine\is-K86N4.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\multimedia\is-F6RTK.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Material\impl\is-NHO2T.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\impl\is-31AKL.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-JBHTU.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\Qt\labs\folderlistmodel\is-EQINI.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-AL8FA.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Basic\is-1S0I1.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
File created C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Windows\is-S96KK.tmp C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000" C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000" C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1" C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1" C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133691040254167240" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3761892313-3378554128-2287991803-1000\{B79FF24A-9405-444F-B753-B8AA02CD61EA} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\{17FF5AC0-1D17-4A53-A10F-85E3EFA3DF17} C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\Content Type C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\URL Protocol C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\DefaultIcon\ = "\"C:\\Program Files\\Softdeluxe\\Free Download Manager\\fdm.exe\", 1" C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\open C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\{17FF5AC0-1D17-4A53-A10F-85E3EFA3DF17}\ C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\{17FF5AC0-1D17-4A53-A10F-85E3EFA3DF17}\icon C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\open\command C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\{17FF5AC0-1D17-4A53-A10F-85E3EFA3DF17}\command C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\ = "URL:fdm link" C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\ C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\ = "open" C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\open\command\ C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\DefaultIcon\ C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\fdm\shell\open\command\ = "\"C:\\Program Files\\Softdeluxe\\Free Download Manager\\fdm.exe\" \"%1\"" C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 168763.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Scheduled Task/Job: Scheduled Task

persistence execution
Description Indicator Process Target
N/A N/A C:\Windows\system32\schtasks.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4916 wrote to memory of 240 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 240 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2812 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 1140 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 1140 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4916 wrote to memory of 2188 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://magnet:?xt=urn:btih:9bb80eaa0c2d384013784a8e2117d235e2de1073&dn=Database Leaks&tr=udp://tracker.opentrackr.org:1337/announce&tr=udp://open.tracker.cl:1337/announce&tr=udp://9.rarbg.com:2810/announce&tr=udp://tracker.openbittorrent.com:6969/announce&tr=http://tracker.openb...m:2095/announce

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffab8fa3cb8,0x7ffab8fa3cc8,0x7ffab8fa3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2568 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5152 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4240 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5752 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1652 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7560 /prefetch:8

C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe

"C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe"

C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp

"C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp" /SL5="$A02D0,39406194,832512,C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe"

C:\Windows\SYSTEM32\schtasks.exe

"schtasks.exe" /end /tn FreeDownloadManagerHelperService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5948 /prefetch:2

C:\Windows\system32\schtasks.exe

"schtasks.exe" /create /RU SYSTEM /tn FreeDownloadManagerHelperService /f /xml "C:\Program Files\Softdeluxe\Free Download Manager\service.xml"

C:\Windows\system32\schtasks.exe

"schtasks.exe" /change /tn FreeDownloadManagerHelperService /tr "\"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"\"

C:\Windows\system32\schtasks.exe

"schtasks.exe" /run /tn FreeDownloadManagerHelperService

C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe

"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --install

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe

"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.freedownloadmanager.org/afterinstall.html?os=windows&osversion=11.0&osarchitecture=x86_64&architecture=x86_64&version=6.24.0.5818&uuid=c716883e-a471-4b32-8722-d74a1a530e3c&locale=en_US&ac=1&au=1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffab8fa3cb8,0x7ffab8fa3cc8,0x7ffab8fa3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9636 /prefetch:1

C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe

"C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase1

C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe

"C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase2

C:\Windows\system32\netsh.exe

"netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=ALL

C:\Windows\system32\netsh.exe

"netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=CURRENT

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --byinstaller

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe

"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4 --printFdm5Setting=ExpectingUpdateToVersion

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1996 -parentBuildID 20240401114208 -prefsHandle 1924 -prefMapHandle 1916 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ed82b061-b0b3-4447-88aa-19889138e96b} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2380 -parentBuildID 20240401114208 -prefsHandle 2372 -prefMapHandle 2368 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7fa18f4f-8be9-4fa5-b79b-7a392d152c33} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3132 -childID 1 -isForBrowser -prefsHandle 2924 -prefMapHandle 3100 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a25bca5-9907-4e53-91a6-8b8336085149} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3640 -childID 2 -isForBrowser -prefsHandle 3636 -prefMapHandle 3420 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c6e07630-2df2-4623-94dc-e328f8b3f1a2} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4228 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4332 -prefMapHandle 4372 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {97b33e81-3a6e-410e-b886-8a65e21b408f} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4420 -childID 3 -isForBrowser -prefsHandle 5308 -prefMapHandle 5304 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2d98dd65-493a-453a-80a0-6b4a3fab011b} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5528 -childID 4 -isForBrowser -prefsHandle 5448 -prefMapHandle 5452 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ebf259c-91fa-4884-8b18-32687ebec1eb} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5720 -childID 5 -isForBrowser -prefsHandle 5640 -prefMapHandle 5644 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {84c8e0f4-44ad-40f4-a619-a3f11fa6e2ee} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5996 -childID 6 -isForBrowser -prefsHandle 3952 -prefMapHandle 3940 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1296 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3f3515d-5c27-4d26-9df2-aa67a42af5fb} 5932 "\\.\pipe\gecko-crash-server-pipe.5932" tab

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa076cc40,0x7ffaa076cc4c,0x7ffaa076cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1948,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1944 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1800,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2084 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2168,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2332 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3100,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3108 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3128,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4492,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4512 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4684,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4488 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4724,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4728 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3416,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4512,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4496 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5008,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5024 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3440,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4336 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3252,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4696 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3464,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3780 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8336 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4796,i,4731559819188779347,5226205040383546356,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3392 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1924,3219358942334239187,4543010603340334706,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6164 /prefetch:8

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
GB 92.123.142.88:443 r.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.168:443 th.bing.com tcp
GB 92.123.142.168:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
IE 20.190.159.75:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 151.101.1.91:443 images.sftcdn.net tcp
US 151.101.1.91:443 images.sftcdn.net tcp
US 151.101.1.91:443 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 199.232.209.91:443 softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
GB 13.224.222.64:443 sdk.privacy-center.org tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
US 151.101.65.91:443 di-images.sftcdn.net udp
US 150.171.27.10:443 bat.bing.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 6.39.156.108.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
US 104.22.74.216:443 btloader.com tcp
FR 216.58.214.187:443 storage.googleapis.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
GB 108.156.39.35:443 config.aps.amazon-adsystem.com tcp
US 104.26.6.141:443 api.btmessage.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com udp
US 151.101.65.91:443 en.softonic.com udp
IE 13.74.129.1:443 c.clarity.ms tcp
NL 139.45.197.253:443 notix.io tcp
US 13.107.21.237:443 c.bing.com tcp
GB 108.138.233.47:443 api.privacy-center.org tcp
FR 142.250.179.65:443 05a8df5488948ea88d4b58530c5dcfd2.safeframe.googlesyndication.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 34.120.63.153:443 prebid.media.net tcp
FR 142.250.179.66:443 ep1.adtrafficquality.google tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
IE 54.77.206.203:443 ad.360yield.com tcp
IE 54.77.206.203:443 ad.360yield.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
IE 54.72.42.145:443 id.crwdcntrl.net tcp
IE 52.31.83.248:443 ap.lijit.com tcp
IE 52.31.83.248:443 ap.lijit.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
GB 92.123.143.169:80 apps.identrust.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 175.203.166.188.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 203.206.77.54.in-addr.arpa udp
US 8.8.8.8:53 248.83.31.52.in-addr.arpa udp
US 8.8.8.8:53 145.42.72.54.in-addr.arpa udp
US 8.8.8.8:53 58.139.4.46.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 169.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
BE 74.125.71.157:443 stats.g.doubleclick.net tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
US 35.244.193.51:443 lexicon.33across.com tcp
FR 142.250.179.78:443 ampcid.google.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
GB 23.46.72.29:443 contextual.media.net tcp
US 104.18.38.76:443 cdn.indexww.com tcp
DE 162.55.233.29:443 sync.richaudience.com tcp
GB 23.36.168.202:443 ads.pubmatic.com tcp
US 151.101.129.108:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
DE 162.55.233.29:443 sync.richaudience.com tcp
US 3.209.126.202:443 cs-server-s2s.yellowblue.io tcp
DE 51.38.120.206:443 onetag-sys.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
GB 92.123.140.19:443 player.aniview.com tcp
FR 149.202.238.100:443 ssbsync-global.smartadserver.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 54.235.220.110:443 api-2-0.spot.im tcp
US 35.71.131.137:443 match.adsrvr.org tcp
IE 34.248.137.99:443 match.prod.bidr.io tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 52.71.88.198:443 sync.srv.stackadapt.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 172.111.38.54:443 tracker.open-adsyield.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 89.207.16.201:443 equativ-match.dotomi.com tcp
IE 54.171.130.238:443 jadserve.postrelease.com tcp
US 192.132.33.68:443 bttrack.com tcp
DK 37.157.6.243:443 c1.adform.net tcp
DE 51.38.120.206:443 onetag-sys.com udp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 spl.zeotap.com udp
US 172.240.45.78:443 sync.aniview.com tcp
US 216.200.232.253:443 sync.mathtag.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 110.220.235.54.in-addr.arpa udp
US 8.8.8.8:53 198.88.71.52.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 238.130.171.54.in-addr.arpa udp
US 8.8.8.8:53 54.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 243.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 202.126.209.3.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 68.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 121.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
FR 142.250.178.130:443 cm.g.doubleclick.net tcp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 52.46.155.104:443 s.amazon-adsystem.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
GB 23.46.73.76:443 eus.rubiconproject.com tcp
GB 23.46.73.76:443 eus.rubiconproject.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.68:443 www.google.com udp
DE 157.240.27.27:443 connect.facebook.net tcp
FR 216.58.214.174:443 syndicatedsearch.goog tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
GB 18.245.143.7:443 js.adscale.de tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
FR 216.58.214.174:443 syndicatedsearch.goog udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
FR 142.250.201.162:443 partner.googleadservices.com tcp
US 34.120.63.153:443 prebid.media.net udp
FR 142.250.201.163:443 www.google.co.uk udp
US 35.244.193.51:443 lexicon.33across.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 178.63.248.56:443 uidsync.net tcp
DE 18.159.128.147:443 ih.adscale.de tcp
IE 52.95.125.22:443 aax-eu.amazon-adsystem.com tcp
DE 23.88.8.123:443 uidsync.net tcp
DE 23.88.8.123:443 uidsync.net tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
FR 142.250.179.66:443 ep1.adtrafficquality.google udp
NL 139.45.197.253:443 notix.io tcp
US 199.232.198.133:443 gsf-fl.softonic.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.248.137.99:443 match.prod.bidr.io tcp
US 52.71.88.198:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
US 34.120.63.153:443 prebid.media.net udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.251.251.25:443 ad.360yield.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 157.90.0.38:443 s.richaudience.com tcp
DE 157.90.0.38:443 s.richaudience.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 74.117.181.203:443 www.freedownloadmanager.org tcp
US 74.117.181.203:443 www.freedownloadmanager.org tcp
US 74.117.181.203:443 www.freedownloadmanager.org tcp
US 8.8.8.8:53 203.181.117.74.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.176:443 th.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 172.64.154.167:443 www2.bing.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 216.239.32.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 150.171.28.10:443 bat.bing.com tcp
US 150.171.28.10:443 bat.bing.com tcp
US 172.67.193.114:443 downloadmoreram.com tcp
US 172.67.193.114:443 downloadmoreram.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
NL 192.229.233.25:443 platform.twitter.com tcp
US 8.8.8.8:53 114.193.67.172.in-addr.arpa udp
US 151.101.0.241:443 rlv.zcache.com tcp
US 151.101.0.241:443 rlv.zcache.com tcp
FR 216.58.214.168:443 ssl.google-analytics.com tcp
US 104.244.42.200:443 syndication.twitter.com tcp
US 8.8.8.8:53 asset.zcache.com udp
DE 157.240.27.27:443 connect.facebook.net tcp
FR 216.58.214.168:443 ssl.google-analytics.com udp
DE 157.240.27.18:443 web.facebook.com tcp
US 8.8.8.8:53 241.0.101.151.in-addr.arpa udp
US 8.8.8.8:53 168.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 200.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 18.27.240.157.in-addr.arpa udp
GB 92.123.142.176:443 th.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 156.146.58.185:443 up.freedownloadmanager.org tcp
US 104.26.0.149:443 fileinfo.com tcp
US 104.26.0.149:443 fileinfo.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
FR 142.250.75.226:443 www.googletagservices.com tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 149.0.26.104.in-addr.arpa udp
US 8.8.8.8:53 42.86.18.104.in-addr.arpa udp
US 8.8.8.8:53 226.75.250.142.in-addr.arpa udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.20.206:443 fundingchoicesmessages.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
BE 74.125.71.155:443 stats.g.doubleclick.net udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 155.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
FR 142.250.179.66:443 ep1.adtrafficquality.google udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
GB 92.123.142.129:443 th.bing.com tcp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
N/A 127.0.0.1:54986 tcp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 47.249.226.44.in-addr.arpa udp
N/A 127.0.0.1:54993 tcp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
FR 216.58.214.174:443 redirector.gvt1.com tcp
GB 88.221.134.209:80 a19.dscg10.akamai.net tcp
US 8.8.8.8:53 redirector.gvt1.com udp
FR 216.58.214.174:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-aigzrnsr.gvt1.com udp
GB 74.125.175.38:443 r1---sn-aigzrnsr.gvt1.com tcp
US 8.8.8.8:53 r1.sn-aigzrnsr.gvt1.com udp
US 8.8.8.8:53 r1.sn-aigzrnsr.gvt1.com udp
GB 74.125.175.38:443 r1.sn-aigzrnsr.gvt1.com tcp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
GB 74.125.175.38:443 r1.sn-aigzrnsr.gvt1.com udp
US 8.8.8.8:53 38.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
FR 172.217.18.206:443 clients2.google.com tcp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
US 8.8.8.8:53 206.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 227.74.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
FR 142.250.179.68:443 www.google.com udp
GB 2.19.252.146:443 aefd.nelreports.net tcp
GB 2.19.252.146:443 aefd.nelreports.net tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
US 8.8.8.8:53 146.252.19.2.in-addr.arpa udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 90.16.208.104.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 beacons3.gvt2.com udp
FR 172.217.20.195:443 beacons3.gvt2.com tcp
FR 172.217.20.195:443 beacons3.gvt2.com udp
US 8.8.8.8:53 195.20.217.172.in-addr.arpa udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.187:443 r.bing.com tcp
US 8.8.8.8:53 137.142.123.92.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 140.82.112.22:443 collector.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 92.123.142.187:443 www.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
US 8.8.8.8:53 sydney.bing.com udp
GB 92.123.142.136:443 sydney.bing.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 104.86.110.113:443 tcp
GB 104.86.110.113:443 tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
US 8.8.8.8:53 161.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 20.189.173.13:443 browser.pipe.aria.microsoft.com tcp
US 8.8.8.8:53 13.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 222.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c4a10f6df4922438ca68ada540730100
SHA1 4c7bfbe3e2358a28bf5b024c4be485fa6773629e
SHA256 f286c908fea67163f02532503b5555a939f894c6f2e683d80679b7e5726a7c02
SHA512 b4d407341989e0bbbe0cdd64f7757bea17f0141a89104301dd7ffe45e7511d3ea27c53306381a29c24df68bdb9677eb8c07d4d88874d86aba41bb6f0ce7a942c

\??\pipe\LOCAL\crashpad_4916_IMZKSPZJZKNUYGJY

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4c3889d3f0d2246f800c495aec7c3f7c
SHA1 dd38e6bf74617bfcf9d6cceff2f746a094114220
SHA256 0a4781bca132edf11500537cbf95ff840c2b6fd33cd94809ca9929f00044bea4
SHA512 2d6cb23e2977c0890f69751a96daeb71e0f12089625f32b34b032615435408f21047b90c19de09f83ef99957681440fdc0c985e079bb196371881b5fdca68a37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e61ca8ef361d92f07b49e08fb4c1c90c
SHA1 6251fd684126fc655ca8222664a7105ac1a5ce79
SHA256 97f74ece8117f8ff99b6ad61d2749db9a3bfb9501798f0662c424639a1aee1b2
SHA512 768900291b16c2a243c212e844c6e30c068553026d61acecfdfbc6722a6f981077e45db184735ee0493894a54dfea039ad5f6187df11fb2ad922d2500387d5b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 aae77bebf75d3bd9097709c4e7f913f9
SHA1 49c099d64e40da1a6b50e63884806beca643e2b6
SHA256 3209bbba670931f582fbae7e19fbe6b49e2481eb3a3dc5974f2e4942ca3077d8
SHA512 1628c6ea9980d762a0d96c426f122563776f96e12ea1e83082ef8fbd66159a8d21bbcdd1f50018c340818bbf672b67defe1c09aaf618f89ed4f6d3d7e5ea1505

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 374ee49e7f6d028f2b1428c6291f5ac9
SHA1 718a0ecdd462e12110946c3c4f5ff292c7cb4a91
SHA256 cea98f022255cf152c06693d202fbb4e21b87bfde5838a293fa120d36c9bfa0a
SHA512 9a30f8dff86e77317098bd72119cbfded3efec672d49c8cf83ba14f7077b1ce5e077c277176b14e7c77ca633eaf9229bd71daa31258d3e57da43991209242872

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d10241e-0af6-4d89-8e86-036ea4041a85.tmp

MD5 ce89ab9e0e04231a000e7d8c517bde88
SHA1 53c83bd1946519ee905f2681f0e66eb0b89a9e4c
SHA256 e1bed3a2b4f2f43661f396fcea5ba6dbcce0d3007a2c61fede1e563237ca8ebd
SHA512 70632d75bc23eefed259d0c306fc1179b79c441c034b96ea72e38b2d3272a14c0c9cdad54376bfa564d6252df1f11920e58e5aa442c6adfa04fb7b0e16f0a2bb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 e84034ab4a768617f0bfcc3bb9bf543f
SHA1 169fcac2ba15df9aa41e7928c47a45f2c48948e9
SHA256 336ea36d6e0642d6dccd7fac485148fcca79ab449d4dbfe8187be2e54180470b
SHA512 7457db7d5118b2a4b303a6fab385e140ce2310232e3ab1b6eda3c3e9a6616931faa2b590da5f5472a7164253195c63f5111b9d28b3f872e8464186ffc3fe284a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

MD5 d71f2c41a8862d79c719bd6ee645e5f6
SHA1 ada93cbda3907c325528e16990e8615ea4c1aba1
SHA256 570d059b6019053051c65b876b09fa2c863f9bb278bc03eda59b3e8fa7dd081a
SHA512 b55a64cfb9b0865ea6a72a8c63c1a79b816e7239efbadce0ac716d7263112882a2a10fc2221ab6704399950139807db10ae4a64a039c297e76bcff29724baedf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5820b2.TMP

MD5 927cc5b5e4ab790ab15ce00a1a4de248
SHA1 cfe0283170a70c30f862922af625a6328cb9799b
SHA256 1945b1d846cfc19583c361eeffd0cb55879845dced242f482eaca4d6e62651f0
SHA512 18185418c1568b41b7aa95a10e8592413eebbd57c1097baad373753fa4b6c5da518708ede03196e16e1f8de34ededec3e05770cd827eee634605a0d1830f41c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ce856f8e0ca659d955c7dd6e1a9049c2
SHA1 a742158653a44d6f95dbc8c147a30bf55a1b2bf8
SHA256 836e5cf58e2711bc3bf60ca65751a18a2cbeb34efece01cc786d36cb9dc21909
SHA512 32096c23a2a506d83f8a00989d457d104511274bde1b15856dca842f8c68a357ae38862eb19788ca0ab12cd292d461324aa7e21e5f218bb2775a37fe523f3369

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6ebb7f53821f6645562454686ca51694
SHA1 d0623a3c7d2894dd265aadf4ae318a6b571c3757
SHA256 db009dae0b29707cdc486d734b4d32cd926b6252475e7199d82a1829997e1f6f
SHA512 64351f8598fb8757fbbde4d8fdd41ea9724b6f03a33d9268cc445b14dd4896b2c53c554d782b383acaacb462e2cc140f77e3929b4842d8226315fb6116f68d75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 a1afe33ce7442502a96deee597945384
SHA1 fe34cd78635f5617cf238de6dc746058d6f88899
SHA256 f7eeb570c60aff1435db1daf3767c0672634269789870ef91c69b2b90a47edaa
SHA512 f8bca21c3fd79d63c8265f5dfcba95419eac697b42efb600e7c33d15dc5d9c3e0d0d360da39e14004facaea4cff4dcfc00d7437979283ce0a2b06916b69b8c80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5 2257803a7e34c3abd90ec6d41fd76a5a
SHA1 f7a32e6635d8513f74bd225f55d867ea56ae4803
SHA256 af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174
SHA512 e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 db4e4c392fcdcfabb0aaef2338ece718
SHA1 6bdfb52b8eb37149f890f441f9e8c1103a977833
SHA256 0589edaec23b4752284661a619285cd1784b99878177a73ffe13f623dae4f6d2
SHA512 9992c90681aaa3c2012958d1e3d86c5b9b111fbe13f6b7dbcd5019c58414fffa55fa14e06882539e631ec8b5364024a533a7510ca5623e3dfb9650a45d002db1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 48916c9cc6ce7b1697f32767aec8b347
SHA1 d561c0b16b61ce84f497d4d1fe723dbe6bbf6926
SHA256 06eb4eb4a8ff5fa12ab02ad3f315dd22ab5795c424d6e830dc1c1689182f1715
SHA512 0d8eba0a744614d4043128025db4cac6cae6d1d2bcc3acd112e0c3f82974d51466ff1df843e4329f16ce2a5dd96561e03479c3d1b21754d9c39009abc00c9b7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c566d2833d2e36deaa557590de08f10b
SHA1 ab811b4aa0520cea8684c662c11427e45ce3c2ec
SHA256 18e3f0a5687249c75ebd31d1c51f7dee8289407895ad9202d7b2942630af2f20
SHA512 4bfa9fb1f9011e4833d8dce75d9e02f95e234efb827adbe603c39a0679b25a7f916933ed979a6553a6bb2db5d682e4995d9fa14896dd0b4f35745035b1e8af2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5ff4fb347f66ff3089da759f1eb0a591
SHA1 23e489de1dac86ff1ad637e95c3640f57cffd11a
SHA256 93e1bd42fc00813505565b9c367358be2b4a8678ed4752ffbc8ca3182848a101
SHA512 557a57c8cf9053d79f18704d7b0feec40b2c7c86dc2e737a934f9c307e3688175a94b7474528fa8799a0a8d7e30becdba48be480081998bc81e8c06c8e8a635b

C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe

MD5 dded481da831784a00d556a1280c124c
SHA1 48b40f82f66dd678f1c2f4c1298eaae2875f75e6
SHA256 2937de2eb7763851d644e637cb7d7375fd69b218beeaceedc46254ac388203c7
SHA512 78dd1b42e918e9670edaaecd1765fb26e349ab7a5bc7b4dc3b85bd387f073a8ac0a4abc6b8a50d5b3cc6cce753cc8745b26bd47b42953723b21b949e7956cbcd

C:\Users\Admin\Downloads\Free_Download_Manager_V6.24.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

memory/1812-825-0x0000000000400000-0x00000000004D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-G7MSP.tmp\Free_Download_Manager_V6.24.tmp

MD5 60f76f6e78d966f31d9c574c7465899d
SHA1 2c231f5a57d294ab2b6c1fc6f7902fb453fbeac7
SHA256 ced610b7c01111d289a511d35ada43d94fb4b2537ccfc0317a23e1d3eecd3bf8
SHA512 59b67dd82d6f3cee823d7fba1722455c52479413664f816c6756e42bee877ba854844b10c90d22e63b3631e3b8b83dbf35912507b7fedd7fda4f2724888e2cf0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4692d876a51e5b7f12089b0ceb931e01
SHA1 d8a109620937628bbaf5533c8f344051cfcd53cd
SHA256 314d447cd084c763dadc2dd53bcecd158b7efbd06f6b3228a381610ccbed33e1
SHA512 5856f0fdde8aca911c42bccb865ad9eca3a26f4cdcd0bc7e499f09b523013c8e72bff2266e94d6696bf4eb5ec8ac4e07d204792434e5c3a9912d0583021506ac

memory/1812-858-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/5452-859-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-UIN44.tmp

MD5 63340c8fcb71734ce4bbac29a86821b5
SHA1 0cfd02b3e95fa482cbd4bd83b0f2d9214acc9709
SHA256 78b5fc58e6d881d16351e92d32b8cadea6b14fbf8c20c1bc7e56d02946467ae8
SHA512 fe035bb77a32d0fe9d4983d90c65d4c2600a019ac20743dbec409f29ffbfbecd8bca2d15abfffb2e71b77e3c105e248627a176942cdf9d7b98ed9113e6f73ba0

C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Windows\is-I9CDT.tmp

MD5 2006d4b7d0da455aa4c7414653c0018a
SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

MD5 b6eb17081c138903a98f4daddc5356ec
SHA1 95338c82ca76629178c342fabbcaf9fe8ad707cc
SHA256 88553acc42f9e638fe19771e0cb2badbe28f569583195d9306c8a8ef6343e297
SHA512 ef9242cd41585318d5daa47ac8cffc956672549f4ce9238db6227fa64ce800a7b64a25cd7b7175e3b1769f29fbc37e4b18c28375159eaa3bf294c1a48588e01d

C:\Program Files\Softdeluxe\Free Download Manager\service.xml

MD5 85c61b85b0ffe2609b00379a5512790d
SHA1 2dfaf069df408819b06916381ac80b3ec097214c
SHA256 24f6062b8679b4140b5c15900deefa8ba187ed5e3c5cb8efc91b26b31769664d
SHA512 3a18c17ddcd10cd89d1c666134f13be6ed441fbe2c36a9567e894c0e1674232d5882e696ad2d385bd5eb4d50b6a1b4225bb992389aad93a77b203318293ca6fa

memory/4788-2328-0x00007FF6D7790000-0x00007FF6D7EBA000-memory.dmp

memory/4788-2331-0x00007FFAA44A0000-0x00007FFAA49E5000-memory.dmp

memory/4788-2330-0x00007FFAA44A0000-0x00007FFAA49E5000-memory.dmp

memory/4788-2329-0x00007FFAA3E70000-0x00007FFAA449D000-memory.dmp

memory/4788-2332-0x00007FF6D7790000-0x00007FF6D7EBA000-memory.dmp

memory/5500-2335-0x00007FFAA3E70000-0x00007FFAA449D000-memory.dmp

memory/5452-2403-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 13051060b790d5f7b0bd843197d98507
SHA1 dac2d1f02062454c461fe017c215098f16ebb7ca
SHA256 2399d144630ba99e68ab1b6dacf9399f43387fa521144e89f421d2413ff8a652
SHA512 f0f5e09a0cfa1b14f2591a82a7585fa7cc25fde488635889177d6cdac54931469cbbb0acc26e1012e0780edec4837f1a9297e4517adf273ef73ae898e422cbfc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ae3be2fe8c008328b2561d4a07dafa5c
SHA1 79fc10fd0b0aee8bce6703ef507234c910061d08
SHA256 f245e8a62a5725d89f03447f91464fe70e9b68d6ab96254b6254d28d083fc7fc
SHA512 eccb855a8ec488143657faebab6013e1457470ccb5534deb55358035ee2ab9050f36dcae5d96e46b184865fd7011e1e5d00492fc9198f5ddf2b5385af862da92

memory/5452-2436-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 ed124bdf39bbd5902bd2529a0a4114ea
SHA1 b7dd9d364099ccd4e09fd45f4180d38df6590524
SHA256 48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44
SHA512 c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 60f8cd04587a51e31b51d1570d6f889a
SHA1 88574c41d0ab81721b275252464da5c7927a4835
SHA256 27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb
SHA512 84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 038c1f469deb6932520d09a340856ebc
SHA1 8b361a8c0489b69e9ef4e132e36f20c161c5ec1e
SHA256 5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451
SHA512 fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 0d2283b0df70bc0217118f5c6d1fd836
SHA1 0aaa2e0daa0f0671fbf7817e222fcd777be523d0
SHA256 fb02c03e84b9a15ea357644f15643bc90eb9c6ef6532e1c82ecd052df34c2abb
SHA512 16071fce7468cc47fd7a57dc6913cbf41e142fd16b3f145dc30b13fb4a84a05fa3211d3b435ace7378c76682a1afc49e45d180eb88f6d32b0deaa2266196b2f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 d9b427d32109a7367b92e57dae471874
SHA1 ce04c8aeb6d89d0961f65b28a6f4a03381fc9c39
SHA256 9b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3
SHA512 dcabc4223745b69039ea6a634b2c5922f0a603e5eeb339f42160adc41c33b74911bb5a3daa169cd01c197aeaca09c5e4a34e759b64f552d15f7a45816105fb07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 bc2a0b079634e3f46f0a4c571885acd8
SHA1 3a711b7135582edb09cffc9ca9e7541399e3cd58
SHA256 4c6256e6b242b944801944e28268bc463ca9023aeae59e5c5c83037f693d64fd
SHA512 357a3c860e81ba963d2bcdb402fb19ebc3aed45f14e68b7079b65ffe7941aa5114315cb58cb3a0d4467f524287eb3dfd00b369c89c8e152833c428d8840ca377

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3959839b2c54b7bf42103b3da2020108
SHA1 0e4ff5c9f64abd064bf0b08f867dffb8fc6143f3
SHA256 dbf7c89b0aca39d29b37eacbde727396a13a4f3c42f5d3c49b3ac91e6ffda04d
SHA512 69daf76e8c59aa7ca987be99dce2831764190faded8e4be36c712505ad2c093b6a30353990afa4cfb4f62c0cb71ed58214d7fc03d98d787b9730dd9e44916376

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e61ff46b2bf845db2b149a7b42f8b6e3
SHA1 368a28cea7660afcc5a85670cce754ae880a5b3d
SHA256 bb9f3ba6a39f952272dc20ac8fba310ccccb5fe1207049e4eb726e9081049479
SHA512 0512955611b4714927e51a70362107e336eae7a154ad051e8fc7c520bf5d5b672fe723403741dbe96e79062a32c408b7a878bc1727dcae72e2e1d019183a8038

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a83f57c9d12c722f73b9de12612df70d
SHA1 d239da8370e26a04d0faffcf57a8c27119069694
SHA256 8fde640d1272606ce4f552da1bdb411ac97d7dd936140432b2990c4e3d352694
SHA512 d1089c064a92184c99ce9760e2928d6fe6161fa3170049255679980628d28e964c72757f14f741ff5dedb9dc22ac429444e76ee0db915493bcf36ec4de68e992

memory/3660-2801-0x00007FFAA4AA0000-0x00007FFAA4FE5000-memory.dmp

memory/3660-2800-0x00007FFAA4470000-0x00007FFAA4A9D000-memory.dmp

memory/3660-2804-0x00007FF6D7790000-0x00007FF6D7EBA000-memory.dmp

memory/1812-2805-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/3660-2799-0x00007FF6D7790000-0x00007FF6D7EBA000-memory.dmp

memory/3660-2803-0x00007FFAA4AA0000-0x00007FFAA4FE5000-memory.dmp

memory/5452-2802-0x0000000000400000-0x000000000071C000-memory.dmp

memory/6056-2836-0x00007FFAA4470000-0x00007FFAA4A9D000-memory.dmp

memory/3660-2845-0x00000174853C0000-0x00000174855C2000-memory.dmp

memory/3660-2843-0x0000017484F70000-0x00000174853B2000-memory.dmp

memory/3660-3289-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3290-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3288-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3300-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3299-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3298-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3297-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3296-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3295-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3294-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3293-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3292-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3291-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3304-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3323-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3322-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3321-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3320-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3319-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3318-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3317-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3316-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3315-0x0000017488200000-0x0000017488201000-memory.dmp

memory/3660-3313-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3312-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3311-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3310-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3309-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3308-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3307-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3306-0x00000174880C0000-0x00000174880C1000-memory.dmp

memory/3660-3305-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3303-0x00000174881F0000-0x00000174881F1000-memory.dmp

memory/3660-3301-0x00000174880C0000-0x00000174880C1000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b83f6f49105b0d65346126e5e17e692f
SHA1 63443dda03137948b2a795ea23b2e65c79cc2ab1
SHA256 016d5232be872081b88d056cd295c98fc5f49b02ccc809b09342c5d495059bd6
SHA512 5db8a2e75741d8ea17f026f852bef8f05c662c93908296e34a81e80d80a6c07d2aa2a182540765306292af11dd034ccadc37840e1b8a0481f9761daf9962118f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e0caef02b74bd5cf92980ad8dc87231d
SHA1 ac798c344d8292000c1fcce8ffd885670af62a08
SHA256 b614a6b522fe92a300c2984260bf9aa9757f02052a8924983d5334ead6d1ec9d
SHA512 74121b46cf2a1b1c3eb9e453dd6aaa41ef294d67b81db6fa5927caf6fd5bef8f94244cc713772d20d6fc74e8f59d67cba8dfe406626ddea79b90e045136f7a02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 310f691fa36cce48a1b02efc87998e17
SHA1 93594b5ad44bf3a64138e3f7f668bb04624d4d4c
SHA256 cda055f1b824ac6c626d0f6a31730897ce35a9add5fa1e6196abbd72ee6a8172
SHA512 bb91b7ff8735107e5e35e8b04756f654fe13d48625058d21fbda6f0e567a3df275cad9c0f017629df6080ec99103b07cf1d8967b06c8100e39d7d7cb458cd6c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d6a5762828b1ee5a455b160889e86e09
SHA1 a5e6d30c7cd764f270c8916b6c45a402885aca5c
SHA256 043db5afdb28ef519a28ae06881a1b4811b12878def2479ae8dc98e826e58b11
SHA512 d94b330cbd6a6fdf573ce92ba30bc3bc751ab575c4fe304b618a68dbb4f6aa944ff559115eca0518a4a1aba699c54a58a173a4e65d7bfd04f0c6132858859d71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cc544d95722ec6d11f498f2afe5723da
SHA1 8180baf946c78f51edea411b0ea9c73c9b1ea15d
SHA256 8c1a07abb194202be20313d2e8d17f5c8aa5b4e6925db93427f226897991a401
SHA512 3091b4290b4392a94800e47eb2f82a6159ae411b43e11534ec863caafd3b52274dc5ae98b86f36ad4277f9039b37ad11de8c704484605bca1fdda0fabaf6d356

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 788abd7dfab4b0a3b9ac57af465d67b8
SHA1 9bf900b10c3f94fb17478c6497c185fc6343fc37
SHA256 56170fae08812a9577280bc08c41334d7b7f91499f2867fd647c1f7fc5e6c034
SHA512 29c592443874a9ee949ec1f6ed576d44435d224ba98267a7b8e0e2af55fe5cedc1796082285f87d3c01ba674d45dfc2d90eedfa74df4cfe15650a02b35015e5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6d5696e1e6895dd9fbd60271acc397b5
SHA1 375e96794ca0d5f6374ef9a357fc226ca386a266
SHA256 de5a8e4e3e01ba3826e77dc21aaa47adbeae3bbe84245714676a5357ec8ced76
SHA512 0f747e5da3368f89712f5d343141fb75ccaa3fcb6bb459b30a3f8d668625cd59636ee4ecb1b8d00985943dfedae026e0fcb198f954c228d55593728f6512aaea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be315a6f9f91774444359d2372b05dbf
SHA1 163381c14b7e963974512278c187d7e87d215912
SHA256 d8fc41a8d4704be1cffc4413efee4ecbc9410e7baa8c43fb272c2633861238c4
SHA512 6b2375b53e55e7f3f486b3ff3c21bb44298da567836fabd965921e2a275fc92e8b74a2e5337c9d32a5fbcc3552a22ea9760e63524d90f71181d181a4b4b4b8b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8d62d777f1b5cdb6fb5941ba465001ad
SHA1 f553da2c79473505dc3935f3dcadf4ce075deb1f
SHA256 44aab521335f618a276b206e5a71f5bf1208f019e61f1c78fc42779ae6eab85e
SHA512 ca135e2d952c233fe293ef278fbc8c650ed5180739f12b8dfcf2b36d7004857f10ea6d22db6fb50f7e9c68cca8c1d9c5fbf883262c4391f5f0f32d9350b4842d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 3739202907883e37be6380dd10a81b78
SHA1 0877d3061192c5493f1abd803cb53b60d288c016
SHA256 ee00d55d0234d603f1f4b397cec2ee608204af60a2dc42342f034f2c3fd17106
SHA512 45bd56bd71ea426e7caedcfb9f1a0dace7207144e80a21a994bda97b9009e78f7e3db0e10234fa7c0e34c906590305f80aff985f162bbf91cbaad3f6449b1a56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

MD5 f491d7a1e7a22a66a1fc117f28f237b3
SHA1 bc73c5a5e5317d23c89ecac01e67bd15c13d83a3
SHA256 51f9df48171c6f4736181185863fecfff5c586e42063eef2e61e196e7fabff70
SHA512 08fb4537216517cd0822fca86b5479934e0775f8f4b1b96792c6e26ab4430b1dbaf6f2e36f0b5926fe06cf2012d19f9c5cda450a4a191161936be55636e2b8f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 027418ea497e6973222ed3c214f09f31
SHA1 6fb8024abb3535002db838d54bbee6ff93a5fee9
SHA256 f679f5683defb12156190131a1359a8e72d231f0099dfba0f88523390c013bc5
SHA512 88386c847ad9067a7eb9e14c2ebe91bce5582524c84187563523d2722d01f3b111d9c45dc9c6795289305678714843de03427e9b17386edc64020488acbbc392

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 87e23ce6f58b87d83e10047baa5f3b06
SHA1 6eb711af5e4d13e6bd0666aa5bffe5219195bf9c
SHA256 3739d60f8b1f550482f2f7ee0d4616b145ce9cefc0ebd8a0bf2ca6ef15b1dedf
SHA512 782401695911926c2bb8f66ae7da3aef3000dd605cc533a845a01865805e6ccd11ac0eddad2e7a945feec324564038f0e2b221fdd5aaf1d5c197ad9814f92d75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 333d81efc5ba51864e7f7a3f38ea4965
SHA1 96d802890dea000877f4bc16fae8d5b6438ee3a4
SHA256 4b5a7220dce1bb9dda11d7b44819318596f3294694f75ced4e4e39f4ed649dfe
SHA512 963e826e9f16e7dcd449991b0c5255037520f0e045c19e73e1d126925d3b8e2db4abe1cf127e74c2a362cae28fa969546b3f117d322b354f86e7296010f53bae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 24bb711ae0694f302b2dfd8e3c18760f
SHA1 58277f84f19748d247ee6dd254a56bc6f71aa430
SHA256 1826954c8d8091f2f6dbc7b5b39d5c3bbbdee6714f9b1b06088ee0fb2e4e23a7
SHA512 6f05601b8abffdaf434e1e6ff55c9f2e2bdb6fe060dcef3d14f6d12e1371c6f01b7924328282c2e2b611621c7bf78b3fa0ecfe1353333c6850c53dc82302cafc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 ab41a82f05a0f6f30c1f0d0282884c25
SHA1 ecd709c17121579fa572101fd08632dbec339073
SHA256 55ab685a6253f01d31a67c85214de0280fd711ca603f4fac53c3f5ef06216768
SHA512 ad142eadb1c87c0a656e1e82ee484470262d7987d3117d42a8612c473aa019d4a81657aec7503fcc946c8cd778309aef9bf6b136bbc63124063a6034a03016da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e14d028892797f177b85e74f9eb1fad5
SHA1 93d0f02ae06ab3cb49053d5e40585732c91d40fe
SHA256 30bf7c8a6cd1dd121e14cd2c2e103ad2db6b2fc11c1aec9c885d80b3d7494bd3
SHA512 df9a641fdbd792db8a556f3cf319ae92d7ab85cd953f35fc0aeeecc77a04cbd99c6bb15c0662821e6d6f99b60e2c308bffae142ecac3b015a7f14732a5afa74a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ec505448c30d36383bbc8a7ed29004d8
SHA1 6c4e37ab6ca828b5ec7a29eca6efda0694e8df25
SHA256 2403adfa64e8b893eba42520da76f62a8a0ed209fe09a3e561c78716fdbea4ed
SHA512 2bd2e6ba0928b99f5319c3c7d55f5e74acf34daebaa53c51ef6b5676d419c89c5bdf2ee54974856bbd35a34d4626cd40ac70a111180666cec94d9265942bbdd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfe07f2c15075c28_0

MD5 44ee4da1d4171f7141ddf45b486474a8
SHA1 58e3ab288cb0ced583def8fce255a918b11f282f
SHA256 5a72ed7a74532419db0bae73f233184e59ef9c9c8c7d732f258c8365e816f040
SHA512 d3c001c1fb391dfbdc17ab9b59951ae460d8d25a1f15a08900d9b45508fcbe756d232ae65d52b3621e71fbff0c42a5ea046eb838beb1f3f44674129978274ea9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\731617a0dbae9acc_0

MD5 cfb10ee3926938141f5197c2f6bab86a
SHA1 84fada386f239ff3456b741e4144309abc84660a
SHA256 50e9cca9ffa50b73b46556e48422ae2b096b1c338377ce7132e7dd0a3b8f8dcb
SHA512 613ef045bce29b6d982b313cb02720ead2ebd6510873e8e874706430f084f5c9a8d2d907972b84cb03bb9dd92b37733c3a243f29a2bef93b5a05939c89f6fce6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4c52b8d2ee31223_0

MD5 9f0f386e363f9accf9c57c2078890835
SHA1 9d6bef10bbf3c5a677f3d1d0bfcc92ca80f0a92e
SHA256 cb04873c7792ceaeae6d76cc55dc64ac468cf5a1c3d72351379d0929513384aa
SHA512 d985d98c0c020a1aada53ce094d80cd16600ca85f6170074ee30b06fdc2060e958de2ebdcd5670aa72399026c58272aeaf99f3ccb6251a6d00fb715f12916510

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\580fd9376c2d4a3e_0

MD5 f1c44a215a117bfb99ecf199d6f8da7c
SHA1 ef18371fe43f1e5ff041bde26bc6209957b30ac3
SHA256 d0c33d2972f92acfc4f2f54aee6f9946d538076a011d3b0920ace3c9e7092255
SHA512 a0bfaf214fb991b4464fb80db7131a7fb713a5c8da922145c6a40fb5367e7d57bd3a7c1a59e0e003f4f80a79c48235f1778df2c34b6be0a0eecb723cf49b5534

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e23bcf4dbf5c221_0

MD5 3187b6dfc85c63a3ab6e185027e3a79e
SHA1 5c8e86fe654595fb60066cf1fba0d61b4a66452c
SHA256 19dcaccf502792740cfa8a988a6b7cbaba8f0b5f2b913bb460ce2f515579af8a
SHA512 3b648ac709ab04d04eb54b1d7a30f9faea0f7760f655f14b8f36d988bbcbcb72606128529e5c4b3e77c578a726e75f3cc0b2cc65dee0a5cc72dc236b890ede63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 827898bba16e39b3978b1b0ff38f58ac
SHA1 75d1fd2051f395519351dfb89f67547e6188e326
SHA256 3c99755566ec3653ccc48683ffb2c8d0d5f6616f1cee2cfd372a0146e6a9ed2e
SHA512 588f0da8506ffd34e8af6eceac8d6b2f82e16008deadbe0c1da6f28eea22fe8491fb1561286509a9eb351eed6325d986214cea114096f2a5709474f25d653d37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 2423d2cc708336ec37213cb71dd3299c
SHA1 b4b3d4e08b3272463d495bf3fc57c4bf593eb0bd
SHA256 cd35cf85d8d9e05ec7f3bf81d23c3553fa7acc748d405f3f19d2668572b2a93d
SHA512 8c552762c403520b1b05e21eb8a0e4b1088c459ef7ade1aa85a26f0bfd3032a0ae816548e6516ad646607ace46ec369075f7d51f35f8c996fa20a9f32f65644e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 48e892cbd5f52c5ad97b4f50e410e1e6
SHA1 5e5859b56ccb74ce3d2c2e4d045885de3d17e7be
SHA256 15777a887e2c7f9d832f11915370196992d7134888d3d634c0943f07198113da
SHA512 634742afa968e014c717695ef252125b7e4bf166404c8362bbea78cec759d9db982c80adb8f3b7edefb1cf39c3a13a069dd9b54dedde2070538783478f9d5b7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 b10da7e3e029635edd567d472c4e8c99
SHA1 b5bc67720bcf5f9e8aa79ac1700e38395278fc1d
SHA256 92265b26d42d0b2cd0277bff2738d01b7f626172ed20db898a13c8dff0044d18
SHA512 569d4563ea877ccb091650f49a3510e22497991eef2c2e5dd985e2e6b7969925666cc714fe95dd8152fba4c9238c6b8aba07baebd6268ff648d085913a283960

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 321a005a7e67269298e3d828177dc05b
SHA1 4c2d75e5650657f24974e3d13b1a80d0b159daf3
SHA256 775da797a2adae2501d983aab6a19470fba810b49838918f9cd9af6c1a36eddc
SHA512 82b678054c93b5257a31ee70a122f9aef733319b2ec68d9fcaf9481d995f04fdc8315e4e6c926fa005d08585bc73d91bdc406ca24acb5ebfd282c26adfc392a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\30ff7948553a7c32_0

MD5 40ce99901f7c03d6bc2525ec4ed4176d
SHA1 29b2408da5b9afbeb9ef53ee12d1521fccb6ca24
SHA256 d98349d4901b036d26b7977b00a4563b19cb00be15eb24bea4e8f087fa83d7a5
SHA512 33b6fe915e58ca780973699e13ecc7e0899f0473be04684418f5294e21c0f422cc509c7e9023657a90b1f44827706ebd4ad036643ab1e301bf988ff4a2c6bc6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2dbc1c31fceae27c_0

MD5 eb7dd543e6f6d32e09c400bd570f989e
SHA1 0b67bb0cdaa332e24b40a9cfb0ea863b489634d0
SHA256 00996bec8d35b1f2acadd8f2bfbbde39bc2269731e20c545d460a756b03292e6
SHA512 1daff4b9dd31a294805195cf0485aea76485549d1f674e4ab45a5671368114d05b09eac4545f7b0b3188061c2a9ca24ca1012aa880d517cc38eac6ce1ce6a674

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 2b70e409a5b350a57773fb1b98bf9a66
SHA1 2bb58d0b8f2ba962b1319be0c770c45f74459e89
SHA256 45c606e78af1acdd005261fe004185aad0cccf5afb57aa3432c39adf8d067ca2
SHA512 220922d717260a41a81ec1b3fe94964ab378ab928b8348f8ab0b5c20b695bd57d8cab55a1c1ed7d04eaf528444e20d34c6990901329742667c18e9becdaf238d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\15bb3a9b22e3777d_0

MD5 11087482af0aeb59ec1e0298478044f0
SHA1 bcafff77c0e43afadedff7af19427e7ef2b2e7d8
SHA256 858781ea4acfa2a0fc4e0f198a7e925f42495a936c3cda90d9f73649aed64212
SHA512 de345a846ce87b9fdbc4851e1f397577d62899effd9b2f2d6d6c935f15b0d8c721edd8bf7e72ec3bbbe97cbc9082ee146aef2094f0748fa5840f237818ba3710

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 d16b330c22212c3c187405ac3bfd3f1b
SHA1 c1a6709f3af3a6c4cf7e5375243dd1378c36254f
SHA256 a8af173832eafc3ab2eebd5831714aaa3f47c2a61844c21ebf508d9bc26661a9
SHA512 37d8954957bd8cc0f595594ff15f8c53a05213aec948dd494739bfc4bb6570d7c5f5d28dfc99172d2beb5b56b1bceaa561d431faadbe2f56c227a56651c59e5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 978b8274c937ac20ffb39a10a5358fff
SHA1 d56c652bc613a7c1c8ea29c0b48f42e01e438ecc
SHA256 4e933197f37e8c938259a1ac9a27a440f70b4500f04116f7ad5de6b7cf710126
SHA512 54dd1be4cd8e71ba4ccae9a81638ff54cae4129072908f979ced8330c9aafbba0a5d1fca9f11211303195ba65cf6e8e78ab9a2063aec06689dd568d7b3ab0ff8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 eaf93801ac9bf26ee673e59a13ccdf3f
SHA1 0f7d5a048d1418a55df6df164ccce7b41fcbf368
SHA256 eef25158df47014f5561fb68f8e6a7767323edad08cad3f436f6ef5fa1a98142
SHA512 66b91b46715ff3e2e7f1ecde5a57a33bf2b01a93b51ed7d1591502aee0ff192ece4b92dba2a6d2d2a94ea3790b8d174dc74380efeb0cd72288425e1d6e7696ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 b4e530b7acac4424de7ed2b9c82f79b4
SHA1 90d052a6880bc1055419df03e769991494dc726b
SHA256 7ffc17ff51ea40ff6f7b8980988554d25d35b0669240f1bd1f086211a72fcd70
SHA512 c61fa7fe37847c3d3b149e41724f168165030dbe78d13dcd4250df750e5b364561792806a31456112bfb6be420be565f58df342e99e6a59e62a903a744e31326

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d37cb16ef5eb861d_0

MD5 1f84d3bf1531c41ae21bde7198a845c6
SHA1 692657b18281a132154bc79a17ab7983731c1f68
SHA256 265775fad8110fe6ba09acea539a1943bdb5c850e7dc8ab8e0b3c87938aeff9c
SHA512 409608ef8c47d7fc79b86e96723ee252c1b1e4af313dda286c5df6ea91ea77c2a6c4d6074e323f1925bf843ba8a424c1f06b166d465ef0fe72a8efdfdef4b467

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 fcc65d43bd0b06726b86320bfe34b90e
SHA1 104252058836a65696ca060963c4842905157635
SHA256 aeb831ddce0260a8567c1109bcd93c3b3a7249bc621bb6736d35e494ff57d2f7
SHA512 48d6733f922612475da49f541a91f1ee57b144ac3cbff840eed4ef412fb7bd86a3c235bacd0f047f7fe4aaf5f54d0fa0c5ee2579e0f7b2d641dc66c487cddc87

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 2c479650305e4dc198bd6f00851fd892
SHA1 3b241322419fc8a9886eb446606cf5778b944c89
SHA256 fe90b6f4e29365b14371f5ba80675873a13dcbf1a0c8e1babf79c40ccdef5fa4
SHA512 09b9191ae38c23c84710dae1aa7df0d8c5be75feed4770584bf2189082d50329b6c16341541439923a864b094aef8a7de22e91600a723deccfda3c1dbd705ae6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 319890d8be9250a3349b4d2c74918625
SHA1 f401937c353d0735b34ffa517c504505cadb26f2
SHA256 7cd390bd014dee1e92e3e21066ecd74ed158134c5135c1440b70f3da97ad5abf
SHA512 d590547b8ef7403d2f724a76cb72099f7850b5b411d6a680a0919831c3d3c1ba6300f2757dffbbb53e82a0b9b8fb5e1467fe4ab8ce6bddfdfa1595dbe4a1fcff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 f6634142c9a5f75e150b1ec5b7fa0660
SHA1 16ee450c346580377cd85cf7f4596b30b4c9d1e0
SHA256 beaed478ec2fac679a1ddc74150729d784aec1d2e8107d6a6f5bd14629e7abb7
SHA512 caf6403cfbd3b68901bd2302961c6fbb016ddf160fcdfe511824cfb3896656652c249fc6d33d2c383d2dc5da88a72ef1fe55b3df49a723865f67a13aaa71a7bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 12a1bf1f03bc2d6ca8011532144d7a84
SHA1 7110b660611e54679ba8a03f790bcbf4a29bd62b
SHA256 adc18bb912fbf18fc630d5bc6acde053cf0a5d12a67244e37441a469e62d1e05
SHA512 04a2c0a81caecab85fd5047f83d2f81e8a16a6274e78a5ef6058c58d417386dad2f0ea4c007167e3787f5efc09ee905485d562baf54a0d8fbe935a5249e5f37e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 9ea432ffb581dc96ecb0a7b7e71f5b98
SHA1 47f17f79a91011af8f96ad14ec0a25e52d14ae3e
SHA256 2629e993de5620569d0be975e3ba479eb3e261bbd85cc2df35a702caed8156cb
SHA512 594434c2e7561e43721843a8dafd2a7f4ea2ddc3efdb319777ca1e433123c3bf13cfe982d2995e1ba603bc671ea21a38e41a9953835abfa633a4b3635205991f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\309311759ae8b179_0

MD5 1af4a4358edd8a1e124f91d16272ebbe
SHA1 d3e0b0ba3e2844a58fa0b596b276f8ab4464a3a1
SHA256 df587032525ce00b1d05ee76d9def7cae27812da51acc29a3ee8c805f5a0f4fb
SHA512 f94c69282db1b99322e37d821ce738d191895f74b01e6a916a1de1764be3c3b538a43ec757d2a8418870f4f788737329d0716683835c9bb2bb625585546952cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c07b1b2a3e9b57a_0

MD5 7b33e65fc25b2f321dc0a7697f895cbd
SHA1 c6075f71ffce77fc2f23f25ca0213e3f5b751e4e
SHA256 ba69ff5d233598e40ac26a9f2d7e30a7cad650164d3fade5fcabc4c6b9df90bf
SHA512 bfa007ae2586f81084c3ca51d6ff48b4a8517d6e643ee977b56353d9d3153bc86c9a6f713be7f63f9dd70e40a2e614872fabfbdd62496c235cdcc340afde9b26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 c51bab749cc8290aafb122c6440bd0fa
SHA1 dc7ea8d91b41852cf677234fa51260e5ae989078
SHA256 0b72689a162706035d38bb85ce7048779c5b5d8cf92bafdf3edd0680e7dea679
SHA512 97e444db93894c7a551675b5a774c915afce637b827aacac7f8bf673d6a5f45e4dac81515e511f9e96202415669d1ed1a851e9470cd28772bec8eafa4d70ec44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\feadcc6fa014c0d1_0

MD5 7590aa5d037d9bbfa7240ea3d5987b0d
SHA1 f34b582ee06a87323acdfd463a97c82ed1f0cf6c
SHA256 d36c7d43ee129cda9d76c153f9b09d2927a264c42d0857bdda84b758f157a66d
SHA512 bbd9c35e22d8233ce2cc3bf9fca7835f9f7df14164e73cf37a0c681e931fe9024b6a5134294c0de9f823f94b627af01c29cfa289bbdc90fdecc902b1d4592fcb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 74715571a904ca19461f0bef08939875
SHA1 10c89972a3aeef4df0c212eef4dfe6666771eadb
SHA256 4eb44fdccf30fca3765f3489c3d0f50d8023d941786a1c6901d504c7f539e848
SHA512 3aaa715d7834b1ded6f761515199e6bdaad1485e22d7c65b4f23a89d0c86d7b3340c94c9f8b8de2fae8768f02e6a182ca21f265681544c9012024457a60bc8c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c4545010b9c4b344_0

MD5 1414c6f854a78dfac323e8ee191ef637
SHA1 294ca9e3e69d7fb4f114fe968131ee4029dbac6f
SHA256 5a6805c37c1032ffb3d89149dc5f71d9097bc41841f50b8c800cdc5900b1c0d9
SHA512 bc52234ccfb166dc4fd541f78f974962bbeeaa8648b3554be6ce4e21cf1e3914738000d4acb19e529872e4f6ddd73f47994ade2a4959f817789e51058b568cfd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 3b17799a31f3dfe3243b956cbc878d84
SHA1 00ca1fc04364cfb80396c1a9649fd2906bd6fb7c
SHA256 3a047b44c0b22a5f2daf454f035360a13d88c7b41e3ff530c95e599303894db8
SHA512 12cc452b0e608acee293794897f1b1e1100969342e8ae2b2a430662685948d34dce26e9db97968f0751c817eaaa7824875dd277c4f90b3c9438fce58d9257d6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\513d53cff9ea2408_0

MD5 5a134b9cfb7644ea2a4562704e72ad4e
SHA1 b90966e4c7cac46c7f811970611aa132c3f07250
SHA256 dcd7e9b01e40e1315256c87662ef3ae0088515132a822dc0ec0733f2e026b079
SHA512 7e9d68612d1b06c8848889498f0122b1de5d5fef35bac756a35303fda0ab6167fabda93f246d144b4e063a89d26e93e55254b1433dbf6688e85e6f82185b980f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9991e6f7970787e2_0

MD5 56bbe590519c204de5405a39f2bf4a26
SHA1 d89ebf3fe3df3437e14487404fe3f05f140808aa
SHA256 d1b9361ac8b9b17ca60b60c96cc9fb1755dd73af634c8c5760d095f967402b06
SHA512 62bf85e163a22edb5645037bee23e0f68357c500a3edc7c168ffc20d69a0c05268208385e3c30d3f988a8534d24c87bb73dcd22e1649a83db07fbd34d6d6db88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b91fad02916a29a9_0

MD5 844137eacce2c4e7377a56f026b3d0ba
SHA1 b68f6312f1f2edfeda2d25d82a17560fda0064ed
SHA256 2af3532753c6f14e593bbed5937659c9390721a90307b883557b3f576e6d8db1
SHA512 fee4a28a67a1d1ce8d1d8d5e6515957300262d2b708ef0d8587ddf70fc53febc7d8d68c3a09b3accbedb64274fb913cd76f542460be169702e95308b5a0903e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 f4cd8c6222fd46beca67fdcb34eff0d9
SHA1 e064aac5839e1fa376819dc7825844b61f7c462e
SHA256 1855a3aa3d5dc7668fa90a6b622b0edbd986a994d20aad34356e5b53e529f7ce
SHA512 8a3cade9271fc6e4f8dc48b2c7110d4b49f76488e2f9d83ed3c139bf6c1cf39b82c659580e99a1a4f6a0a2187acfb6cf74006da9d747ad5b047d59bff46b3396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 436dc24b9a5c24de6122884da5e83795
SHA1 0a81105fa491472a9ee9ef222098e3736cf28bb0
SHA256 bc17d632523ee86f79d9b3662b2ef25732c472e5588be57993de02efd833292b
SHA512 b149ecd33653f9d823532ff2d2d8adbfbf6bd8e66da4e913c75596725e024a29b46fb583184d7022956536e8fdb4a28fa913fbb515ed17abc20768c733233d70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 03eb666d3c25f3fa7b0e9cd2607df208
SHA1 a7e01f4ef01d261b25ba7d6217a73f4ca5d2131a
SHA256 e45d00832e0035be34a6a209bee715115303cb2fec7c5cfefbe3e80e5c6c09bb
SHA512 6119f8efa297b4a8ffa5a498d8171db0a2a80bf1d011898ce8e29c87938ff06ad882ba27088da9afa97a8f65fb5967a909722b2bc410d65189c01e0ec3b5c994

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 dc89e72a27c7a7ca6190bbae29d77d63
SHA1 1ca1330a829d2610e1901694d2b37ceff2813ef2
SHA256 42c15d9a69ae4649355025e0bbf3e41d339e416796b0bdd2c1c6b1d0445b176c
SHA512 d3b92b1a2888ba5e2473ac810c299003a853115191ba06e2ab417386ed63955b5558ad9d331636e8c49015979f547c0772e987a1d67f5c92fa873881767244fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 62758ad92f21e987291cd3102aa09767
SHA1 c5831a01fda743aacfcba948f68e9534e8f061bb
SHA256 5daea1d99d5be2f9febf5585db161becaed52434127895034c0a9ccdc4d9d4d9
SHA512 b168d768cfe77708d780bfb3d853f2bca6d7071b29741d2b7d0d07f8a14a84926e1c18c60b13938154270a561d66173d89032016ecdfcf2da54b43624ba24bbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3557d97bacb52931_0

MD5 eddce99a917cc90b4e0b39b036cded50
SHA1 5363b59da35de9c8c3cca12fec8cacb32b1ea795
SHA256 9c0969c0566af677ea6b00c10da28845071cbf7a29e34add5af9dc55943e03d5
SHA512 ba4b710ad4ba6cb07c71e7e3db920287fcbe3ce811aa665a305906626140d2dd9d7afec64515de1faf3c4c6b59d86b54f895253e85af8f1fd5ba6b6ff8a8ddf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 4af41963e4f2971736576d233a3c29ba
SHA1 51eb644735c1d91cfc2090f2be310d7ef5ba8b7a
SHA256 555240b88ca4963a2f90da568d4fec4bfbc7e60f8c216e84a43f086e7c0cc391
SHA512 6fd73d5fabc9ce5fddb3e914c5047fb3ec486792cd984235ad0b147cad2508b94f17dce012d7d5b697781e7b2d7b972d95018cec32af8fd323f98acaee90224e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 0fe565e5875a482f79eee9c6f11f35ed
SHA1 da58fa3dfe9382366085eb9e6695ca2c1dd066c4
SHA256 6ce3ab63763472aa1c60d21a58c1b478904de320508063a6e7e69527c2cce179
SHA512 85d9a56b49b5ec1e1071000ffb444c3e3e1cb293a4b3fac8117faed13dcef28114c86820cd7d0bf76ef3406aa45ce6326bd6f7eca0ca2f309f240433b53c64cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 cbed5bc74894a2793db87cf0a7556909
SHA1 a14f51dfb5a8c8db70bb4a02734e95e8c26b70bc
SHA256 232aacfb9c0ea5806bcf0ee3d1c62f645f3a79f513f2b4bcb2a1425be914bf63
SHA512 092bfedb6072aca2f759e081a1edf6456524c6d98cbdf4266741f3ec0d315a393067cbcfe60ee70b1de69f4cbe04f6c9a60d2f89ddef81869842fcb194adbb59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 9416afae1cbe694e95786ac141e3cdf4
SHA1 616915a1e294d7c334a8fdb272ae90162a26f39f
SHA256 3a9b596cf70e3a22e4d5b310e657833331114a6898d58368fbd707c90f64a4c7
SHA512 f4ccaeb6ba2fa04a3d7fab21fdb46b5ed6d4def2668ce0c9bd0a8ea64a8e7b270575b3f210b220bf7a6efcd370039d6a2efb072f8ee886e750878df915023b5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63bab61298dfac24_0

MD5 be91cdc6963a0394a1ba6bdc3328e42f
SHA1 0fda38d464fbe58d33014729c4285e4c3d26785a
SHA256 cbc2eee8ec3589765fe2538dcae8f508ab5489520abec4164530116b55dd53d8
SHA512 d793b7c32a02c20fde78b7535f474ab1fcf3657f880427948f4d656d41a6bb3dbf9a079cc03d39d4d1018e4eb959c51afc9f5b42b66d0d45d39c593099423a4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b46bc94cf722f32_0

MD5 f23b7b6a42b401a5fae1fa2c5a2649d4
SHA1 10cf14303ab14e7f4bd639e19c4078af2b5da238
SHA256 7c1bdf2bc18727ffc1d7efc1a63394c100e9155a9bad86ff30f7240696af6c10
SHA512 53302073c067ba9630e662654bcfd157d99fcf5b83582c2329e7b84b6c22497763bae85794819f191eb62ef930c4294a9230b6addb12bcb761f22b9f908b57d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 bf70b5982b68e0d2f0cc688657d99f8b
SHA1 e45efaa06bf7bec541c4ac983c942da2d734f547
SHA256 2b478fa92be740c3aae2177e355114c26a8c9ff820d5c0c0036091899a7b06d2
SHA512 9d6ce0f9ed48d3be4d6436c0acbc38b6c6e1272e3506254a927ae2e0f0bb2f83287be95163c2b82706cafa16e96b790e6be7618d7422c7be9c57194f6c94c124

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac0d1673b2c5d73d_0

MD5 ebb47635e72ab9d5135b3ef0c70bc05b
SHA1 f1d86d30df852e579c00986b48bd3d3cb2cb42ee
SHA256 214eb9aa6706abcc5126680e4e01af0d2b083627c9d8975471dc92129bcc90c1
SHA512 3c11e1667d1d2e3a8a0c6822fdfc9f909455e765e90554f77b77dcff9d2bbe20ab8e201409db5a6b96235029de36475b3219b0b962e0e761ef886e2896a4e9ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 8fe814cb854540832d76363f444f8858
SHA1 09ad36033919f8cb31c736dfef36b059afa251aa
SHA256 7f37c2ab1785296f9981cb3b35dc9abc5f11d936b114eaa9fc80e1a5361127f7
SHA512 8c40a06fc4bd13fb590361dd8bc53371889f7648ee8789011f05987fa263732acca8b84f488bbf09ca89f35b4253382589384a4c09d0527db09519898814c00d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 d505a8c21bbbaa8939f583cadbd161fe
SHA1 ffa961719da14e8eae8ff63ddfb3cc324d3aef50
SHA256 36b0b91b7b97c8a585e934ad18e4aabd84bb0e68d91f80da129aa3db33d43c85
SHA512 e0d73dbd60b8828fc5cb7dcc92656edb67905724d9d6dce90a67d0056cb673c75faeb08349ac78beb5b6ddb668ef7774603be00d8317aa314580473ad66b8fc4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 6f2bf8c1a626e1b97708a776780f3a88
SHA1 4fa672f1d52ee24f216641e3e6f1995ccdbae38d
SHA256 f20cbf10b12d265cb60b38d3657d9dea1d38c1493a0aeea21023b94e0c4db9f0
SHA512 9188caa7741f9903d392c924814ccff2831c75cf8a0d0fcf6744a8fc753d7cdf7423c158d19094fcf101b36259fff56749cd7de1844a7678f7587467c1ebc601

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 80bca05ee510b8a79ecf56bd428c0b4a
SHA1 77625509ce097c0631b37fd2cb53ff3a26214408
SHA256 5e62d82968fb979702b2617926b9d0806926cd7b0faa75682e59f81d14c7ce24
SHA512 7b825f1403d8486893ea6b085aa3129ad6b1b6a8545cc6789a32b84d50cbd04fc36612fb3077ab7ff86fda9fc6bdd11d0e1140c2328c7fb2540a6023b53aa2c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e36a814caa066465_0

MD5 511ee3bbea1c1a1ed85b245b3747520d
SHA1 681fdc8b8b8fbb00e0681257d436c245bd34dbeb
SHA256 04afcd8c071de6027ccfc9ecbbf5ccd24526a252de710a073a803f5114a7ee15
SHA512 106346b14d644071ac1570b2fc7a59c5cd23179b770ffa82722e0933b7848255082bd99e8da18aa895142d3418a934b127b489a062c0f90d27fcb3d47019dc96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\91941d5761a7895f_0

MD5 347925671f760c2b746486b1b25defa7
SHA1 5d5bcbb24d1882dfca2481ca00b3e2767bfd3cae
SHA256 57894f5cb5ada82cfb52e369c1845dbcf38c6e9e9ca3ba09e8368a990871436e
SHA512 9d988e12cf0525f2dcc98172379285ca829061ef0d3dad526f99283621edeccbbb17dda2356533401f6cf62917de95750ac1bfa639019cc28bdf34324301d9a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ef4e966526e12a91_0

MD5 a482316f116b9ea196b096bff737fc3d
SHA1 e97d1751853a7e8f0333a281000c937888bbd101
SHA256 d2977b56ffbf1e70e34af92e8b79a1a78777be5935b56a5a539b2509638f717b
SHA512 e408385baec1f2d7d2256694eaecc39a269a3bb762ae74b1e3022e2e9a79c2d57ce0017223d381d7d6fb823221963f107cd9d6f9185dde5a389045f930bd4b2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c9dbafdf1d64b4b1b81c220703ee2ca3
SHA1 a228dc6865a3dde050e3e18107f7c41131783946
SHA256 a8c1be2daaf4a528b1056897c2a9aefc56931bd79d182ef71f97e68e0e764b52
SHA512 3d995e8f63c1d9db96ef4a350429864e862d2f402e7c3718e5d083604d97fd0957097ecac505b73cb853e04469cd96c8ea2d89d6419a7633af81da001ecf35bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000088

MD5 555ee3da3a0da1af16f8e7191f4a55d4
SHA1 db08a26f6dec8d8c07a24784b2fd579201afe3b8
SHA256 39e04c586620220d8823cd6448ad616851f06bb127d6ee646ab26f72c522c4a7
SHA512 9193f1cdaf8255f7ba9229cea059f01c6dde8cb8ad7390aa31fdabdec993ff2df3daf07885a0b66b432e07c4385aef5757949f91f5445fec3adc5ab1aa117af4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

MD5 e54cd7a71559c4279cf5f8d446f47cee
SHA1 a2d3b78b76b378e85a89d6ae7946bbfb42245392
SHA256 752048a98c936fda66e8cc4da6dbcb74d2932b279337b7b0656755e666e05e43
SHA512 5ada1962c3deb95acc3740a65b3beeb563ecfe41e5d0695ca6609d0cce15b2863243c047ec44f5d74abccbae0450c041e297bb6e1819bc3990c401dbb845fe27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\80520c6bc56e3d47_0

MD5 b04ab6f5aae6a2b420e0d4aac19bb90d
SHA1 0009fec4de3bc0734d8d6a730fcb59625afe3e3f
SHA256 00249bebd761970b6903470ab27633bbd55fc76142b8b1abb699bf672b8568d4
SHA512 891285b571cda08fe94120c9854fdb21c7295fd46512fbbc4b854c6de8b6a3501e89ca6d5b41212567037bf275ddec8a81214a89929cbc9f7de278cf6c43e2d7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\datareporting\glean\db\data.safe.tmp

MD5 37663c0aca50cc88899149b0698dcb7c
SHA1 da5d7720cbe42b0904656518b8a7788430e50cc1
SHA256 8b85c4a4a861309863e154d4dae129cf1fca1445419023e9016954367c3e5669
SHA512 ea54232c337ab5a2bf0db03592b5f84e6669390ffaaa890733df580ba61783a06b0da0a75a41f9588715f16daacb469722f18ab9d5231ec57973e9fc152685cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\datareporting\glean\pending_pings\4325ed1b-810e-49a8-96e1-028202121c2f

MD5 e300fc32b637fa70ab1ce52b3457c838
SHA1 a009a55216cfec271903a57c9e7082ff8faeafae
SHA256 5f7fd4fd5c0dc264c36fe1fda2132be26641ff8b3c6496af2a417c7c0b48eb84
SHA512 7f0615cf01b41b3aebcd64a32fae2663ee2709f261865dea2bea877fdd88f9785d99f1b611ead4ed90eaf260726de682dfcdc48653087667d85629f1d373242b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\datareporting\glean\pending_pings\41675f27-42ed-43ea-a21c-0902ee456b3a

MD5 e7b976f7eb9b233f036d675954ae87a2
SHA1 479c2aab5a1e24888e87ea7331952fde1c9f8ef5
SHA256 93a23bd6caaf82443a995f3ba5a1f652a8fc76dce03d329557f0253bd611b426
SHA512 4dfa27caa349f10844e59f413b0e6dca6535761b327967c129a234212891ca0a0f144dbee220096f76e0518b6e0828d9918e6a71fcb7025c66f2af3ca4b1dc9b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\datareporting\glean\pending_pings\0286fc34-7074-4aa0-95e5-e5668daec48b

MD5 10814a80964c760450099dab3534702e
SHA1 93ae9732bbdc3ff089d23368b3e5f71f740b37c3
SHA256 63b6346061706315833ecfd289b34ffceb9f5ce44cece46376c256b63478fdfa
SHA512 0ce3c31c9f2eca23ebdb3e9adc28e15d1c69d5b7baeb2bbd9d7a1e44a8592262dfd0f3d88b43e9720d85635745a4033c5f6d8b24c561bf9bc879bff0f6b961ff

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\prefs.js

MD5 9ddc5b0e80793a6882b14645836fe336
SHA1 9f4c8311575c14671ff04029a31b7f1bcde6afc1
SHA256 3c235ce41d45cf2243520c7cdefe246880752bce15e0316fa88a1da947c3b38e
SHA512 21fc281b4cdd803394f46a334a14a13e78862f92557f93cee284d13d0c800fbf1fa5c83d681878bfba1bfae5a32fe08e75e165a7b095169eeec2bdc8ab871e4d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\prefs-1.js

MD5 bb78fb70c98a5b179903311e9ba04f42
SHA1 f91c4bf43d8aa56ca5d1924751260580a2f31baa
SHA256 30f503f2e6e362471ccbce322c95058c255d7dabc4f76ef55c40d735658fa629
SHA512 1dbd9bfe40c3db07d4028f76b1b6ec38b02a339a6c5190e4e26da689416a6af8da7b89916990038e8c18ed53890ca0146dfd565a1bf365207ad32a8104bc74fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bec889acedbb62353b1f563ffba06fc5
SHA1 82cd9fe1e819d217fb5e4dceb77831950073c138
SHA256 e89773d7737a830b2c4b437b1d7a517cd0364c1791b20bb5586d5c956a34aa1d
SHA512 29c974632a136412a1522bac57cb08a0264a68f0434801b88373ddd754ed23a89a7a52716adb48a17f85b72ac450995a9e5501398c98fb69886489161c9e88f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cf5f765e9aa524087d22cb7734524c57
SHA1 8f8748470e5ed126ee1bb6b82e81e710acf43585
SHA256 22236df5db5ed5663f4de454fd790122e964406058ed40407d96ee1ced4d37f4
SHA512 b729cd5514a5721311a913ab3a097aa1fce1e1718667ce0c839d016b3c382ca0687f83ef7a6d06aa0f579443c5c25933b4cb4c693d063f6cd5d1a1238cef6b27

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\AlternateServices.bin

MD5 6c2a80ef26899c8551e1c7de1a941251
SHA1 1ddd0a2d3afd58af2623ba2d3fc343911e66c49f
SHA256 852b44828d2680a3fb7e1c922a44ec1fc4093aeb8970dda6f68852f6f4527f9a
SHA512 5af20d00029fbb45556b3f03717ff9d83e9957f71d00554843dcc2e6717a9ccfa7dfe9d879e85c727145c6337244ce9570f78d5672b29a414411eadb9396a177

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5vinb3pw.default-release\cache2\entries\83E3BDEEE2656890431C3484D2DFAC5D44936E89

MD5 2b8dbf565007024e779ff8cd1d230075
SHA1 00ccc4bab97bc55187c2e24d158573699bb08fc9
SHA256 9831574f8e057bab75c8b4846a24b0d94a95d03b47f6671341be7beb93ce2fbf
SHA512 6920ae62a521cb42cb485ef03d839604f1640b17843993fc818832bdeabe4af1a25f319ba7bc477f14ef968589eec9e117cfb8b8de7e6a6d6404fd7e095c2ae6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\AlternateServices.bin

MD5 8c4bc2f56653569c96e562c2fe347b25
SHA1 0bb7a95cc90974c0c279d56d890e8db334523f4a
SHA256 1ec1ff1082b79ad09b7df72895f664a0dfe3dca3473280d5e2102f5f8501f9bc
SHA512 5b593262e79369aae8c3742c6a780900474c3c3e2510fa269ce4a145e97812746538adcef1e81bf5b54d29a0591d9499f7cc916c67184246d0cfcab71fa3a663

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\sessionstore-backups\recovery.baklz4

MD5 e7ba5f787d81df421826ead88ae04d1e
SHA1 9ec7bff37b0e072393fa3ea24be75d859229d953
SHA256 8a4ea415cb76198bd06840ce935a1d4b26a57a2ccbfcfdf08eb7ab4a6ad0725a
SHA512 57cd995069fc2bdc4614a5b5e31adc70cfa56dc9a0f2acc66f206983b601a367fffcf8d2f8ab60ac57506254a89b3723663f030d6823cf1cff93db7f85436a9f

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\prefs-1.js

MD5 c9a253e0515291ace0ee66f2deea9673
SHA1 32c7f4cd1c0829c798e65d77e17b2e311ab0e472
SHA256 b918bb7edc76ec0386f4065bddb1c0ef444becbdfa7544cb48edbaa2b3518232
SHA512 0aa97884ed8e4232d3a1a4c2903f78213c4140d3fd721c899e252f9d6845f08e6f47fee8c01150ce15508e977ae2f312603774931b7afb9caf4392e6931d35eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 27e3f98371744df590375e1e4bf6071e
SHA1 8a137f0d8861a31adf47e9abe713073cf48dfb8e
SHA256 2355b71a5fbac1e4f0ec1d625db4666e4159dfa1e1706b11498d9cd5deaf9bb8
SHA512 f11d2e2fffaf6680f147a324d9b58bc0cd72ee99531d2e372cd9aced1d2ca71853f08db077a822030b2577b2935c46f404780d2e6019429c4211cf9386fa3c2c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 5582f8669adfefa08463a11075869a64
SHA1 ccbbae04677bb47086968673cb2de28cb7071a9d
SHA256 fb1cf0b8ee399595a13d866a9fec62b27735b58fde604ef705537d2a121fcd17
SHA512 9a5778dc24bf99bfbdef4854c4be63daa71300cafcfd317738c0444b9131b479ff1281b78c18f0ccf9f92d28c64a57026ff06d94642df162056e4d8844abec0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0205e92ffb82439ef3d229c60314516c
SHA1 2efa22a8abd85f620c8c168a8288248805e6d56a
SHA256 4bc6943b83c9996360f79bae5d6543041a3d5d2e4dc4bb672a54097c89f0e687
SHA512 e4f3aee1788fe15aef88d3170bf4e30d69a3a23ef3d07b6ca2cf6413001d254ae37828f25642f44eabc63607babe1cc47b4b2433d3c39e5257981f38ea2908c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 a44e9e994c65eae40289eeb9f7845205
SHA1 4a1be568a1d54ba98bb7b63179a2ee299fb8c4ee
SHA256 a315c5bea9207c0cfd0b9462e1912abf80824466a7ecacdfbd60b86a1fab15d7
SHA512 fb928a5d845bade9c744874cbb8324468949ad688205fd66f2f186484ab6ad1b2f4be4424e82a8d6810ff8b7dfceadfbc4ca0ea6d951210a606e99a842246c6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a93742411eacf5649d0bb3e65116b89b
SHA1 78dc8ef3787b13bf5b26a6c3ff2028aab71f2e80
SHA256 6da56236fd3e517382d26c9fd1f49c934a6ca6c16429c893aa84ec5480f7e3e7
SHA512 ec25710e8a507072104b33f5c1b5c79f0ccfa1285482a7d6d4da2d403274cf1a23cf30424a3e47f0b1f8a5da62e7036b34eb1d06d3621699812a81236573bb64

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 546dd0d55cdda3e13772c63e15013b98
SHA1 a1af45ec177846d4d02aa75e3de7e5d652da5bf6
SHA256 32ce9058050e4c5849d8b194d9d0bbe388ef46bdd2e4890068c666032555352a
SHA512 0245172812edf1fe5d48699dfc54278945e7f5847b382990f8a04ab5777604b75dedb3b31fad0563da3304c21d9688b130e69759bdc91e8978f06e1ddafce541

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1f31f5afde5f5094c3f0d170b95d4460
SHA1 abcd4393b34d359c49cd7c76a48e3c14c7a65532
SHA256 a5d34bd378a59ad9dc5ae7d4ff14029993852aa7ee20a13711bc52b2dbb6bd52
SHA512 4d6d555a0dbb0e75d0e47fb13e7decb32fef11a7525adfada793f2e6c40b7b1bb714720de9f917ff60819d52ff3366be7ae7ea35deacb6bd1ab20a49f7998ed3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 24dab965024034c28148345c8b93b4e0
SHA1 1622a7db0c7feabe153ed713336aa5e6b72a0978
SHA256 106693d4ad64f963362091f2fbcd5b2517f8fc2949ddde30a93583128d8bcfca
SHA512 001bc308aa8471b52933adefb52a999dc2a5113e21a2e4d8b059c1a16a0b1222c5ee2e33538da5e2c8ac10e2cbe35537ea600d83f746e85bb3c695b775c05412

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 07c06a7f7343f62c2e97ff089191229c
SHA1 c2f42062902e165c76fbcb3e60c27af4bba4a9ed
SHA256 58764a948d76a2120d254c06bb0234545c2ee542c154229f6a2ef40f7fd226e2
SHA512 64dd5994b7950a0f016a4420976c5c593734754e23b3a4d1ec57efc2ed049b37e9ef541fbc8be202b81c6a892567c0c08f52af7d58cb470afdd946efc424f4dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b11e419a2da6c8f553f2e93eed3e7275
SHA1 4e1de6bb6253276d0d63aa5708a6ee96b8f87ee6
SHA256 b4a0e9d2b540bd40c7a0f95d22af2f1665312e824fcca7169b204784a569eedc
SHA512 0c2dadcae1ed7f9f29e93394a6efea78b62db73f659771881eabc341d429cc75543c98df32f0ae5a995d2da70bf1086034151a67af4cdea3937de07069ce37e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a2ee879e2fc869c7e06b74e8ef10d8ce
SHA1 d6bcc6dbe4cf70f37de4b433e2367a681a67dcf1
SHA256 2311482155bd2cb71aa690b6a81a9f8eb27825e6b72623f9afc22dece4c8888a
SHA512 d4bca8e20f75d795ba4abaec12b15e16e8b919b63e24a46a209fb8992866229c850d588b4c7879c60892c91b7c3d765f291ffb7df7855b70e718d6400c23b857

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 06840c370f203ad642316bf23bc1a28d
SHA1 b99d5927cf29c16f95d92319b893d01be6509439
SHA256 6218151a127ee3bbf4a09a31a95610bdd6cdb055bf3c5d3211891c36bd8dac83
SHA512 cf3c13bc26c5e908c161fa4bbda6134f5669839ffab3b50999454490d0251e00dede88fa499fc28480ab56e5cd748a9a43fa3de02f1854f391ad932b15d6c3a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 6ae1270adf41fce27b6067ef7bf08c3b
SHA1 9ef4d161b24b7eb83faa857b77e5ba18b91ae39b
SHA256 1d224c5ebadf6d8465ee8aa568c20263ca464b7ebe6698b37b93a74df7f3c865
SHA512 31a0d70c11a81f810341f5fcf7be722b25988061a7cd9ac1289fff916cef2de4d520dfe8bd335329cfb1803479fc66eefe374af73e9a4d51320c8b01d3e30a7f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a6cb9916466eb35e31c333aee755d9c1
SHA1 afba4f13c5da717bf6d9690952709c8820398a7f
SHA256 2e973e4d5fc94351cfdaba2f9db1baee84f42867e2e45aa70066f316c1eaf3c3
SHA512 0a08acd72f0eedd87d8b2f40f0d7cb3dde19dd5bc9431a43fc1f8da83c50d1fd684a1c19553833fa2164208247623fb352cfcb1f4200eef3f00a21e33c1d1c5f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f45b6394757c6b1ebc2dd4cc0e6791be
SHA1 52a4acbde58565d14b8d6ad33638fadc3634c800
SHA256 d3be45904091560b2caf0ccc72606bf2dc23d1ec4468fa53ae57a6af572c5351
SHA512 5749fc0163ae0ce9d88d66763d7b656c57b92cf47b6e762d38dc67fe151ff471837bd3ff4beac13f5243bc5f0fa4643a6291282f258b33b5974ee7f50988cc38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6ca9e6a3e60023e98f2ccf94648430f7
SHA1 536b4e44646a8b85f52b99927233c80a175892e1
SHA256 986eaba869fb52cbb4daf56f5f40fc1fd68f3af93467ef3243e0c6047b3c4f67
SHA512 601c6a608d0634f43adfa940a2c6d9b2b444953527ebb4d9c7934338b405b105d1355e1ee51a54620e68ddfebe085e424c3fe1ce2ab5fb61ac1924e1c06b767f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d501bc39f33bbb69255c0eb47f7d4d75
SHA1 82855b11941b2ac6af1944009c97ce125011ea3a
SHA256 de82cac1507a99801d8a7acdcd7c919f9e713867e9613d09a7497900808390be
SHA512 003ce107e757a6da877c513a114bdfc6491cb74c84c9a68fc15f2565e560e0886c3330c5e548c7e19aa70dbf84a8d9c69a377fab2137cce454fe9101eefc0381

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0861b22f8a2bcafa7aafb2d974a34dac
SHA1 85ad46d3b20fc49a35cddbe8787cfa60ed611205
SHA256 082f0d6ecbcb2efa0dea8797f320ec3dbe28191a4ab48683aaee5b66f3586b3c
SHA512 1a6fa4f8920f196055382e0f124f6dc44ed1837cf2c20b7117629e1896f4e0de85d568a7c1c92d3b8462530ea624120ff8431ed782c538ec314dc284e6ae296c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 161980670ca3873d5d22ac17b1584fa9
SHA1 b68c506fbeef17f2c564eae30fb65c1dfa7ca64f
SHA256 2397df339c2fb93506a5ca06d22e6dea324b0d29533e6871718520ee0601fba1
SHA512 57a1da50c0ce0fc4b8df7e1c4f84f4eac9844549fb39c6a776ead3be6aaec3e8002e254a433a79c5b2f30b419e9bdfd9a5407f2b2a14cc89f7f0bb0e5e64bccf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bba08e2e1f1c8f96_0

MD5 df65c38fc99099e9c187ad3ecaf5fb04
SHA1 d6548bc3091c76198967c9f665ba0a37fc6a472c
SHA256 d93a7d84dadcb2c037504d80ca65946c63429f48c7c255c67213509fbb5d5622
SHA512 ac7c23929e10363e63adcc62177a3294dedb2f4c85a5ef282b8069e1c9ac2eb55a419157e2665f219e0985946749c22090266303d0a907eac66df5ff3c8f63eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 ab6a77e3a687388b04e4f688c64954b0
SHA1 00cf387c65b94914368ad4478c80f35d42f61e3d
SHA256 e34f24c3b942fd58797297d581657c55b1f124d7239ad52bc9d08f6fdbe36aa2
SHA512 e1c171208870efaaa45677bbe746396caa1bb57964e23fd0e19d838e298126984d2a968bdb37057f32d80d9329e73449e1e929f75f0bfcc118879a3b770e189f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8f9af3f47b6ad9fd_0

MD5 8d530f48d16bb21beb2e91bc2f35830b
SHA1 3df99b40deb91c759a58b25c631cee0152528a47
SHA256 c2cbc45b50db79afa3b826c98463470ddaa37e110a13140056d18a500f507f06
SHA512 198de9c027d228e0647054ea6155fc2e888739736159aa8c84e4df6fb1199ab7edddb85f30385fd9576c3f63759e89fb6505ab3fa5f46d3be387a5f965ed5296

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c0109f54c03223c_0

MD5 76345c8e52d1f09ea7c146ac0b8f4237
SHA1 bdca21f4c1de0e1580c0f5819c36afd7c3996f8f
SHA256 06c5e49d18d95c517b11b314ea218b39c108936bafafeeeb71d9c656547c3da2
SHA512 92d766dc4d913e33df1a01f88fd27784a5ecbf5f08ce711c276850c58073adf9ef81366377d3f3d29765de8b903363e70803b0d08ab5168eef38f172d83daa86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc2f0fedd3e9608a_0

MD5 ecb3a312d81b1cc1e8784b0fca838e85
SHA1 8dbe0ba3496730c4145a23715635c363ca870d31
SHA256 4dba2ee151ea639a6e605adec2e1ba312a1291dca5a6e8ec4aa5b76b2367f583
SHA512 b829a58491e9084d7efc4f9b1e51ac4f49cc105ea9b81a6446c83614379b8514be18852a260b52ae187866103921239cd75a6fbd6a3d7328ab78029461c50e33

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1d5b9531555f4b9a6fb7abf90858e366
SHA1 3e3147dee1ef3c0bbbf550718c7be4827b23d35a
SHA256 ed2f7a41ebe9ccbb7f7a0976bdd4d9e7659ba2a60f9f2ab7057fbec649b3e92d
SHA512 ac1301cfde15502df27bd0b036dccd21d15dce620a1ee77e1825c04dbff85d850495658cfb1696244f129ee0f94a9dc8ad4e24f6577d419b73da88678cef78c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 29bce1bc0e9e90df0e9c6a641a4ee61f
SHA1 5828f020cff97c4bc924628d615204dfd72a48f0
SHA256 690983a328ea1c806e7302b0d30c5b90031ad85509fa4a3be092a5226b4eeacd
SHA512 c0a8b618f485636e4a5dade04b1602eb49786d05ffe6b065b2ae4e46a7041ab239288b034c892fd02af05b2fb21cb4f70cdd743236904c462fa68c0fe867e0e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ebaa81616107d2194a92357ea19f86f6
SHA1 b9e955c4c5eb22f73f887a2f79ddb89c89d01791
SHA256 9210906cfef99adee9ebd8ddea4f9a46369c4e1edde4bd5c9267c31286d2070e
SHA512 20a4f6e7eb836e2f277893ffeb91755159c13d151ae11e71cf9177408abc100d5d29573899d776139fceb273c3563cba977354130a5846a55e57b89fcf49b3fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 daad3aa9b0d9f8862ec87592822bba9e
SHA1 2942a0135d48c609758a2aa38b387305c0e7987f
SHA256 72149a15bc0589362dee1a1dd214e4dd1cced03c30c04bd4cb1734ace7cac03d
SHA512 706610037605bbc8588e2d877d28b00a44f66d5b71a18184136a34f462566c7d7ba011dc45be65dfc1f0fbd305cbfe053f855d4699ad6f0f77054c5b71c65335

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cfc678e910e977da62712b7d4e12f0b7
SHA1 c53b697bce12740170bef1f822f17b58abe797bb
SHA256 820b572dcca81bea3cd6be7bce8c9ce59d9f784e126624a40d6ec65c9e591dea
SHA512 1ed2e571903a4a4fef814c498c8c1a4c16c684a67ea119442511552afb8fb3d424c5ccaf8df46d24ecf1d94452f8baef11fef19ccc598b91c10887ca60e20b6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9f1e525b57961aca1120ec8f9f84b6c9
SHA1 fa1da9b0220e649ee77539dce69db34ced69a127
SHA256 6494908d5b1c41abb75e71909472ff7e07614f1a549f2875f8886fee92203d76
SHA512 98ee465afd6b698cf6e8fca1aad60aab043d41b92a36d5c2249f059a065096dee3cc09b44fe9254cbf2134bad8893cd130f2e05c255aec7a72f25bb92fec0e10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9110851e228c6d2b1467a14d47c69f75
SHA1 be0d83ca52c725a8bc21ba3e79973c9599e6d9d7
SHA256 8373cb4a137fdf84ddc1eaa30f68adba2a0ef05799144e3f697885c6a35e40f9
SHA512 92c6e89cda129825ed9344d6cedd1caf3270f2ff33fd00f42c6c1c361dc642499c7f836c7d84376264fa66ba61bee5c574e9bc21588b1055c86988838fc2c3be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 4bafe61c93e0c6ade9651b963d500639
SHA1 65aa9cc08d9318dd154f95219db0a89987e253f3
SHA256 63f17b0a1209e1282f35e9a09ed6aa57e964f6b5cd624678ee54d980e07ca352
SHA512 ea4b9f30b25320138024fa85ee564ac092ced6ef484e1e7a487d803cc49bc5cd923603159d4d7144d0ed8c4ec3d0f9c29c109da0f3fa94386239d895038bf0cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0ca3f6f80f4c12c0f1962dbc56366fd
SHA1 33b38d41000380b117e59362ab52fabb53ec5a5e
SHA256 afeee721fb355e14c9066ddcf422a48178d1f7dae64138b490261d16b8593073
SHA512 c5fa54faec98e2b11cc7c8f90f57c37f789e76b15bb7a89b54c585ee58309d8fd55b9c4dbaa9ab34cd345685b56d681d2748bef8cb3dfd136ee04bb909243d08

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b7af111f2bb96ff54874882021bfd38c
SHA1 a9887857cf1674b57d0b6dcb98ea6c53bea05746
SHA256 1653cf174ed2d667f3c7e7b7977d9608281021fdaa4c3c7b43dc86e46dd0fdbb
SHA512 19a1792f3ba5a1e991148b1ac40665b955c6893d908b134030e6836b80bcb0d1eb280948d12e85f5496fa584a9ed66bc30118e3ec553ca6949c7d3ede6b764a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a67769912ffcf13f_0

MD5 66e7e1789f096ae43302fd51733ad0dc
SHA1 c63a008fe5438d713fc7d9c2121e21b8fc37d821
SHA256 c7369c7a359bccbc3d0e599f6dd9c3832e0e847fe7a035423be21915d9cebce1
SHA512 6cd60473f84f17514614a4a4b3a9c535d0c03eabab4a7ad106aa6177908daa2aba96f3c1e68bda4e44138c85143aba105d02d19042337f4fe890dfc559f0926a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

MD5 f88d2315cfd540d916ae42783597c372
SHA1 b2deccbcea0de7d5373d3a43871c8e89269c5bd6
SHA256 e6bb06b05f5af9fdb86a2e14866a77ac4c73f6d4b2a3327723d706707c8b0f9e
SHA512 09e5da5010eca7e109aec5c0c0c5d3017283ddc673e16dc62767be5a2ea5ad8d5d857bf78ef3b2c4c9592e3bb4e4043dc43bcd759212b34d851ee8f67fd3d51c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2b7ffcd51b01561f_0

MD5 a927a8ce440a90d72abc4389980335ef
SHA1 97087a26d76547adaf75a352ca93b7e2cc1e3188
SHA256 ffe7a3f41cb944359449e74299cdead461fb9020c266614c4a38323661b7dde1
SHA512 a657628070986be77cb234521561ac53d028f531ce41263122970a8b358354e8e80dd3bb819061cfdb874ae4665d7085dff7c4684905ea3451190667d1117bd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009f

MD5 befc4e4b79a42b59bf510f5869dad8c8
SHA1 657fcbb3345fc5ee6615b09f7d03a7200c3af8f9
SHA256 3f6615085661a1a5b3c6d3c3ef03de57d0b7b86d8162f00f5de90976cf19d08c
SHA512 69731737282af1d51603c1af88913c122298dac2e2e2d024005907fb1377f1c19e20020fabc7316550410efa6b08c0272064c1278538ec19fee95078c88ea960

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8c77ea818fb6aeb4a25e2a4ecb8784b8
SHA1 404d5e9ae5f124424953958af486c6fef71c482e
SHA256 2fe5a2b9cd9628b88f046303e4e1ddb28280234ce326a901d6089c1033b19e34
SHA512 c7ca2022d63f422386a3e84db6e73c6a6296ec9a0412cd004eeb8023ce0c4ec5b4ced405e26eead2856948a4bccbb511b2b6c8287d08e6c9afde06274e0487e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e921e676a23856ccb31a37da58277e5a
SHA1 b8f6d893d82142058a2dc848f8052dda69bd8013
SHA256 fb7569abe88456a04f395cf2222e5eb24431904bea0d7005d59b6f32a152268c
SHA512 83e8a774db5578c232c81122c92e14f76651447ef3fc7812717a5f98a8abd3ebda08a88666707dbd78619d6031f50894d69cc2b2cd4c7c6ef598e73c31ea5ef7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 55258b84ae008bfeae6bbcb5d7d8b6ba
SHA1 6e9517d6bb2b96132b0907c453c6661dfdeff422
SHA256 1ce67fcbb3dc611a50b6af6cc0a37a507d6a4ada3c1dccb27ef89eb600447881
SHA512 f443c97b6a548c7718628402b376da9d4ee566413fac3b1c39d7725689e72643d13ce91a68842ba8c5514578806f91bfd3b4c4d448777005408b088e6c4897c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 2afd8abef22f81d60c489bcfcd6f1a0f
SHA1 665f9fcac09a35e689d0d81445d5da40575df223
SHA256 f500a3cf7c57d51d2c7e2d43fdb473229f07330ad89241b0d39e6baa868fe207
SHA512 b3fd276e89f4c0c8f48d9b74ff33b68b1133f91170c5e82f2499b920863b23d6ef51d13a8bf031ade70b84730fddb5af9a2522edf556bc9e48581eec0d54890c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9196d04b8f7a0f90d842ea3933d98184
SHA1 697f39d4e37180f227b0cf65e63f6dfc8d363e6f
SHA256 9a4dbda0e02468fd21d760c7df1aa6a78cea8f6a5b89fa4fbc3ecd8fea7e2216
SHA512 153f76acc0b7296ef47ead7301ed91f946d611ba4a460f3e24e3fae56dc6ab71e59ace33282962cfdff46bbb4a66d48dcac7d9f7c0fad76a20e3f7f70ab987ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 dc75f62f3b4fe8fcc5c5cc84cb52ed64
SHA1 77fc4fc79788cd84e9bd46fea8e74126aa2cd364
SHA256 46a845f80379e80a1cde6b5c7ba9dfc0eaaaa1962979f11419faa9d5d9ddb710
SHA512 705c49fb4a46787d720821be4b2acb98330a79db99363e03e526f6c4e715271e9d84a5bd4537ddee9bd94f961bec1b4dc84cf84c994b20789b352acb2bb8c914

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3ebe303c2a7dd29b9296867f717be048
SHA1 4fab27ea2be87cd33cdfb54028be1db904f52225
SHA256 17bb8efb6f4971bb576a611c88aef1cdb5848fa1501c8521da476cc28e6054b5
SHA512 ecef81b7f66645f65982c8313d6ed10917142232ced9da2885c2ec1a40842787d7e3058d972f11ce8c4346ac1e644d24db15f6be2e471519d10956819d935e32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ee09d8e7adb177efca4f431a826eb6a
SHA1 9662cff42570cee964a9c825771313ab1dafca78
SHA256 9aef17d6d3bc4d3432c2944b849ceb91ca857d19f34f83014244d3310fc62feb
SHA512 e624ab15f3924c2511c3cb1110465806fc31849896349fe72a252eb0054afd46597c8b0c4018a3a346f46ab90f7238e023fb2a7b4306985dd2ee4bbf5b57c5a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 33fda14118e32b1a48db1baa0060dedd
SHA1 4b77db174e75b86e48ded9a8e9f0ed22d1941caf
SHA256 632ec1ba2e64673a232e92cdf821021c57cffaa2792389681f1771f4cba5fe7b
SHA512 bf5dccdeff34ae2964103931954e0207c849d19eb875f8984f97ce81a88d6ef0a78358a960602c986216591dfb32edb7f4d49a09259e140ad38bb81dabc54632

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9bd7a61005f1046790260d7108d969ba
SHA1 ba2a2aba9cc64e88db2c87985f032888fca27351
SHA256 f27d669eabb979768d1995ca36307405dd2a9e71197571be53d38206ca7ace1d
SHA512 465ce2e47087e2a6f5bdd2279147f37ad0f1e48a8ecd86e8be140dd11608a0d6886f39356edaebd48590587eae7a5d13a260e31e23c2d8b0fe2eb73e428a8c13

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f3434ccc54caba3a700e70d164dac07d
SHA1 578fae8c173dc7b553146bc6f890e2d6fd264166
SHA256 055ca255d3253d675024fa3629509e7133501034858aa6d303ee65c1ddac27db
SHA512 f25b9155db172e57293245fc0a6e406ed931a2738c5c76d31e77df7cccf45b57a9e24e6b9d1ef45c9e8aab18072090680a6d58b7b3d5f7453614318aaa8c8a8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 48667841aa655b337b15f2ad53dd4511
SHA1 67f3d5a23ccf7dae674c589bac657fafd73ec015
SHA256 a5fb1ad43c56248adb7f279a619198f249d4531263464bbfdc49130ae867360d
SHA512 e15e2b4222c3a416d0ded6dc3f34b90d2fbdaa6b15109bc93661c521f8bbcfedaf9bf798286832d5697b6644fa86c232172029b0e5be2472b5897fa8e7bacbca

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 df9b58ab3ba66c77d808bd5945ebb2f1
SHA1 3a4458e908983a1a71f0473b5d83712096024762
SHA256 88700897b8e6a90f481db71b839ea42da806a485b3d934aa0102ba945e99ed27
SHA512 414fe79cb8f0175fa4f9aac8c919e06a5e838bfe429c631abf49541dfc87e5b0ebf3801a2e89de652583ebf152bb56cccbf451c8a0744d313b231ff6c7ce5720

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 b3cd27db6dc9d0ee17571535711503cb
SHA1 ca525b8ec023a08ad158e2a30eb49068417ecffe
SHA256 473c230eeb130b1ad3842e3cb37e49e5f62e52d8ba9051667b472d6818b51654
SHA512 3b5742f82191c6cec1140a18c09384f2d0220eb6c474a235246982d5fdc48e25fadcf1fcd25f942cc727041393aaf3fd9c5ebf5e60a1011b688cf475ac5cd05c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ac094e0d7751f3657ec38cddc2643bb1
SHA1 d729a7fe8ae9cd6b72f0ea2329eafdc459abab15
SHA256 1848222b50d92f8e8e110388d56f81c06b80e1a1f41f7a7e77c47064e1473e31
SHA512 de9dd2db650b55f38ba9b33867a4ab9af21dcd22f37624846b83b2cd8c003affe0b51554e3918e652f477aa420c674c65fee77cc199621b6c4b997a7c4ada840

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5da2b8f2061ce60e50cc6082794d5959
SHA1 a87d1851616d882c1dc1e0e25e37a9c7e1b6649a
SHA256 61d25f0b7de4d39a3ee8b64412c355f2e84a436f65661039d88ce92127f43927
SHA512 4c2aea19331301371ebf2e4bdee728ed2e6fba70b30f4f8a7388d896a3c83daafac802231fd97f96b080f2c640266e89705e0e219fd60dab1a0e0023b6e892f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 348c006b9965b6b0a3d546b0878e49c5
SHA1 19ecc11c5d41b6bf63f91f7acc67679ad74075e6
SHA256 22c59776aee1570fd7450af8ffe4cab77df01ad62bbd8ff98e4e91fb7d493843
SHA512 c93928805fd3f140c0fe4cc8f24d32e523a7a756f28e31657b086bfcb5b77b6259ef0580eb4d065e53cc0a87fdaa5ffcf3a915212a89ec62354c6ec0a3dbc2f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc9a944fbf690048705080465474079f
SHA1 ee845ba78e5ee227761f00fd2a8a9973137fa890
SHA256 2b8e3f65e87ef2b8569469c3e34da581a1d852c689d357195ee9a4b1c2c9ee38
SHA512 cc2623f52e284433c45e8e6b275d052fcfd9ed60c9e14d1c6e343f4b789a660430ec576acb19200caf7857f00f9a24d33ada93349814a92f3d8f4dfcf91ee11c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 91220b95490fccbe097024d74f9c54b9
SHA1 779fea94d35ea714be95571363f2aabf3cc9c42a
SHA256 8c25d8670af189f70518a9369bdbcd3f3c265ff35ce5a7dbb7498e239dd962db
SHA512 c997c07259059f81827ce90e1d3a2ed1276fc2f54bfa7c5c2eedc5cbec5f1bcac601a354b8c650a6449fa748571ea5258430b875f7882e2e0f0dce5aa329182b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ab91cc0f04e4394819297f5051e5a669
SHA1 753bb05700129e852266e166b68e5cf59e03216d
SHA256 c62e940f16c4bc1bb49385d68474ecaa5808305cef272c812f2eddc6d710cb1f
SHA512 e5f822ebcaa1f1016ed55e47b995d387382d55c6feb2320dc7bebf6de7a69d3dbdc64111ba766606a911eeff82d6fd80cd542899a85766cc78babfdd00981491

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 66f3332f21f5db036c1dca838e9258fa
SHA1 612136d7a4abc58259ba4f171f70c12626eabcb1
SHA256 d66951f5db075cc6bce01ea75309d00c396d1c517f31e2de76a2a2da012cb504
SHA512 b63adfb1f98d3a4689ebf98149af0fe877c35ea62186ae2a1f8b71e9e28796cea954297abbf33e21dbaa10a175e3b0d0c4023e5531c2879a61c5afb4e42552f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5e9b96e85c144837951825b4b8efa2d4
SHA1 b14d94765e47ec0e677afdf7135ec961bb984240
SHA256 25a1265c77434ea38b0b77a0f1bc027d2c2342335b19a83f8edc9233f7ec73f3
SHA512 f3897a5b011554c90d3eb70d318d6fe6ebd9b2d39204b7c10bc07f5456ea289b58dbe23609b031201995985932226f51cc770d3f536d79cac3e2b84bc9a91090

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3955c1e52f22bb7130023a4bb52cd0f1
SHA1 d2bfe6f236ea748418cd545bd1987842804f9c82
SHA256 e3d468f9e736ed34e40edf5691a7b2bf5c00d513d82b4202a9d665d3fda1b177
SHA512 d87823a8c01db89467b795e6963bf60de3683045072debc72933b8d8b51d5cce09f41f7c72e9042a5ed04b0f58d37c8b6ba85b1d65e7a7237fc16c753ff177e7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5vinb3pw.default-release\datareporting\glean\db\data.safe.tmp

MD5 f3ebaad8360abf70384d2692357de68b
SHA1 8af7e928fd4dda88f1e71916c5368dfb8f4df4f4
SHA256 474bfd424377ee1c28f2691d945ce1cdbfd2c4239452e61d092184c903501ab3
SHA512 61073232d0f148fcb6a4c806a5c902da2fcd53ada3b0a0385671fec89125de287970ba604105b37a762730cd8280dc954b27cc6d722581927d80a509fee741d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5d7e572a79726f438bc6d030c4d4d617
SHA1 982103d53872abbe1344ac05076086a4dd4532bc
SHA256 515b7f6cfca9e0f1076a5d94f8c82549ecec2e4dbce27e40c8bfbcfba4f89da9
SHA512 9359292e28acbcc139803c941dd0f52b174410103df20c764779c73f5e23662f6b302865baa122d62194a16d6758f4709d746d08747719619e218488ee28362c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3cfe13730159b475c20355b595c4aa5e
SHA1 be833ffaeb90d70f005042e3781399485f4c96a3
SHA256 0e83821426227fa8e039d49101875355a6b63f82e469fd0bb0e64e267dd2a476
SHA512 ec68a74390c777e8a9ba7ec649b74f79a56f0475ae508351e0e8d6a5d1410fbcd7812c0af3f9a9ad3cd0cf6542d724ce26bd01dea175a2d7957da473512e59e6