Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    253s
  • max time network
    259s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    26/08/2024, 21:58

General

  • Target

    http://magnet:?xt=urn:btih:2D27D34AAB31A2146EC3DC5172B02B96BFF657CC&dn=TerraTech%20%5BL%5D%20%5BRUS%20%2B%20ENG%20%2B%2012%5D%20(2018)%20(1.0%20%2B%201%20DLC)%20%5BGOG%5D

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 22 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs
  • Suspicious use of SendNotifyMessage 30 IoCs
  • Suspicious use of SetWindowsHookEx 11 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://magnet:?xt=urn:btih:2D27D34AAB31A2146EC3DC5172B02B96BFF657CC&dn=TerraTech%20%5BL%5D%20%5BRUS%20%2B%20ENG%20%2B%2012%5D%20(2018)%20(1.0%20%2B%201%20DLC)%20%5BGOG%5D
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4008
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffab2203cb8,0x7ffab2203cc8,0x7ffab2203cd8
      2⤵
        PID:4184
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1896 /prefetch:2
        2⤵
          PID:3572
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2824
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2580 /prefetch:8
          2⤵
            PID:3052
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
            2⤵
              PID:4012
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
              2⤵
                PID:2176
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3860 /prefetch:1
                2⤵
                  PID:4160
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4344 /prefetch:1
                  2⤵
                    PID:4724
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
                    2⤵
                      PID:3936
                    • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5656 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1892
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
                      2⤵
                        PID:4280
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5068 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:2384
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
                        2⤵
                          PID:4512
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5848 /prefetch:8
                          2⤵
                            PID:764
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5840 /prefetch:8
                            2⤵
                            • Modifies registry class
                            • Suspicious behavior: EnumeratesProcesses
                            PID:1800
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
                            2⤵
                              PID:3112
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
                              2⤵
                                PID:4384
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3972 /prefetch:1
                                2⤵
                                  PID:2908
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4240 /prefetch:1
                                  2⤵
                                    PID:2744
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
                                    2⤵
                                      PID:2228
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4272 /prefetch:1
                                      2⤵
                                        PID:2468
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1
                                        2⤵
                                          PID:4664
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
                                          2⤵
                                            PID:4888
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1
                                            2⤵
                                              PID:2652
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
                                              2⤵
                                                PID:1348
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6764 /prefetch:1
                                                2⤵
                                                  PID:1600
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1
                                                  2⤵
                                                    PID:2072
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
                                                    2⤵
                                                      PID:3524
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
                                                      2⤵
                                                        PID:5512
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
                                                        2⤵
                                                          PID:5656
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1
                                                          2⤵
                                                            PID:5668
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1
                                                            2⤵
                                                              PID:6016
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3636 /prefetch:1
                                                              2⤵
                                                                PID:5232
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6708 /prefetch:1
                                                                2⤵
                                                                  PID:5244
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
                                                                  2⤵
                                                                    PID:5400
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7464 /prefetch:1
                                                                    2⤵
                                                                      PID:5528
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3000 /prefetch:1
                                                                      2⤵
                                                                        PID:3744
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
                                                                        2⤵
                                                                          PID:5928
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7820 /prefetch:1
                                                                          2⤵
                                                                            PID:5784
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8120 /prefetch:1
                                                                            2⤵
                                                                              PID:5164
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7308 /prefetch:1
                                                                              2⤵
                                                                                PID:5384
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
                                                                                2⤵
                                                                                  PID:980
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7832 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3748
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3040 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5904
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5920
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1
                                                                                        2⤵
                                                                                          PID:6128
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8448 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3356
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7968 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5964
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8636 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5932
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8664 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5968
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8776 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5980
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:4144
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9752 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:1580
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10120 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5568
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10088 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5512
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10384 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5288
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10644 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5200
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10636 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:2060
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10004 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6148
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6276
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8264 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6288
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8468 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:6324
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11464 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:6428
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11648 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:6492
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11604 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:6624
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11892 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:6704
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12120 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:6788
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11940 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:6888
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10008 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6956
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12556 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:7036
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10568 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:4668
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7620 /prefetch:8
                                                                                                                                            2⤵
                                                                                                                                            • NTFS ADS
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:5992
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11908 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:6496
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12608 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:3760
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:420
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7448 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:6516
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10108 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:4872
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12600 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:6632
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7768 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:6452
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=12644 /prefetch:8
                                                                                                                                                          2⤵
                                                                                                                                                            PID:6676
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=12644 /prefetch:8
                                                                                                                                                            2⤵
                                                                                                                                                            • Modifies registry class
                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                            PID:5032
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4160 /prefetch:2
                                                                                                                                                            2⤵
                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                            PID:4948
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
                                                                                                                                                            2⤵
                                                                                                                                                            • Modifies registry class
                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                            PID:3740
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1884,6921815911313443283,13319154369047127637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5072 /prefetch:8
                                                                                                                                                            2⤵
                                                                                                                                                            • Modifies registry class
                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                            PID:4464
                                                                                                                                                        • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                          1⤵
                                                                                                                                                            PID:4596
                                                                                                                                                          • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                            1⤵
                                                                                                                                                              PID:1188
                                                                                                                                                            • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                              C:\Windows\system32\AUDIODG.EXE 0x00000000000004BC 0x00000000000004CC
                                                                                                                                                              1⤵
                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                              PID:7144
                                                                                                                                                            • C:\Windows\System32\rundll32.exe
                                                                                                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                              1⤵
                                                                                                                                                                PID:5220
                                                                                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                1⤵
                                                                                                                                                                • Modifies registry class
                                                                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                PID:5032
                                                                                                                                                                • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                                                  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Temp1_Full_KEY_PcSetup_1919_ṔḁṨṨẄṏṛḋ!!.zip\Full_KEYS_PcSetup_1919_ṔḁṨṨẄṏṛḋ!!.rar"
                                                                                                                                                                  2⤵
                                                                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                  PID:908

                                                                                                                                                              Network

                                                                                                                                                              MITRE ATT&CK Enterprise v15

                                                                                                                                                              Replay Monitor

                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                              Downloads

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                Filesize

                                                                                                                                                                152B

                                                                                                                                                                MD5

                                                                                                                                                                3e2612636cf368bc811fdc8db09e037d

                                                                                                                                                                SHA1

                                                                                                                                                                d69e34379f97e35083f4c4ea1249e6f1a5f51d56

                                                                                                                                                                SHA256

                                                                                                                                                                2eecaacf3f2582e202689a16b0ac1715c628d32f54261671cf67ba6abbf6c9f9

                                                                                                                                                                SHA512

                                                                                                                                                                b3cc3bf967d014f522e6811448c4792eed730e72547f83eb4974e832e958deb7e7f4c3ce8e0ed6f9c110525d0b12f7fe7ab80a914c2fe492e1f2d321ef47f96d

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                Filesize

                                                                                                                                                                152B

                                                                                                                                                                MD5

                                                                                                                                                                e8115549491cca16e7bfdfec9db7f89a

                                                                                                                                                                SHA1

                                                                                                                                                                d1eb5c8263cbe146cd88953bb9886c3aeb262742

                                                                                                                                                                SHA256

                                                                                                                                                                dfa9a8b54936607a5250bec0ed3e2a24f96f4929ca550115a91d0d5d68e4d08e

                                                                                                                                                                SHA512

                                                                                                                                                                851207c15de3531bd230baf02a8a96550b81649ccbdd44ad74875d97a700271ef96e8be6e1c95b2a0119561aee24729cb55c29eb0b3455473688ef9132ed7f54

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                                                                                                                                                Filesize

                                                                                                                                                                47KB

                                                                                                                                                                MD5

                                                                                                                                                                e986ae9b00196333bf42aa4a8466da18

                                                                                                                                                                SHA1

                                                                                                                                                                11fae80165c08eb1bd9b37cfcbef6ff179ad4cd8

                                                                                                                                                                SHA256

                                                                                                                                                                aeff6ae1d21d5757959e98bd1273fc7956495da4d7f8633370fafb5f03c6e467

                                                                                                                                                                SHA512

                                                                                                                                                                45ffb7b5ca2843b28ea655512ea88c83acf3fb8baa052359fdc44e77bf30773cad630f25e149d22fbef99e71016cf86b0c7d3c508444c1b6faecfe45e8d36419

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                                                                                                Filesize

                                                                                                                                                                64KB

                                                                                                                                                                MD5

                                                                                                                                                                d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                                                SHA1

                                                                                                                                                                ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                                                SHA256

                                                                                                                                                                34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                                                SHA512

                                                                                                                                                                2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                                                                                                                                                Filesize

                                                                                                                                                                67KB

                                                                                                                                                                MD5

                                                                                                                                                                ed124bdf39bbd5902bd2529a0a4114ea

                                                                                                                                                                SHA1

                                                                                                                                                                b7dd9d364099ccd4e09fd45f4180d38df6590524

                                                                                                                                                                SHA256

                                                                                                                                                                48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44

                                                                                                                                                                SHA512

                                                                                                                                                                c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                                                                                                                                                Filesize

                                                                                                                                                                41KB

                                                                                                                                                                MD5

                                                                                                                                                                60f8cd04587a51e31b51d1570d6f889a

                                                                                                                                                                SHA1

                                                                                                                                                                88574c41d0ab81721b275252464da5c7927a4835

                                                                                                                                                                SHA256

                                                                                                                                                                27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb

                                                                                                                                                                SHA512

                                                                                                                                                                84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                                                                                                Filesize

                                                                                                                                                                19KB

                                                                                                                                                                MD5

                                                                                                                                                                76a3f1e9a452564e0f8dce6c0ee111e8

                                                                                                                                                                SHA1

                                                                                                                                                                11c3d925cbc1a52d53584fd8606f8f713aa59114

                                                                                                                                                                SHA256

                                                                                                                                                                381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c

                                                                                                                                                                SHA512

                                                                                                                                                                a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                                                                                                Filesize

                                                                                                                                                                65KB

                                                                                                                                                                MD5

                                                                                                                                                                56d57bc655526551f217536f19195495

                                                                                                                                                                SHA1

                                                                                                                                                                28b430886d1220855a805d78dc5d6414aeee6995

                                                                                                                                                                SHA256

                                                                                                                                                                f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

                                                                                                                                                                SHA512

                                                                                                                                                                7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                                                                                                                                                Filesize

                                                                                                                                                                88KB

                                                                                                                                                                MD5

                                                                                                                                                                b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                                                                                                SHA1

                                                                                                                                                                386ba241790252df01a6a028b3238de2f995a559

                                                                                                                                                                SHA256

                                                                                                                                                                b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                                                                                                SHA512

                                                                                                                                                                546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                                                                                                                                                Filesize

                                                                                                                                                                1.2MB

                                                                                                                                                                MD5

                                                                                                                                                                038c1f469deb6932520d09a340856ebc

                                                                                                                                                                SHA1

                                                                                                                                                                8b361a8c0489b69e9ef4e132e36f20c161c5ec1e

                                                                                                                                                                SHA256

                                                                                                                                                                5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451

                                                                                                                                                                SHA512

                                                                                                                                                                fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                                                                                                                                Filesize

                                                                                                                                                                43KB

                                                                                                                                                                MD5

                                                                                                                                                                d9b427d32109a7367b92e57dae471874

                                                                                                                                                                SHA1

                                                                                                                                                                ce04c8aeb6d89d0961f65b28a6f4a03381fc9c39

                                                                                                                                                                SHA256

                                                                                                                                                                9b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3

                                                                                                                                                                SHA512

                                                                                                                                                                dcabc4223745b69039ea6a634b2c5922f0a603e5eeb339f42160adc41c33b74911bb5a3daa169cd01c197aeaca09c5e4a34e759b64f552d15f7a45816105fb07

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                                                                                                                                                Filesize

                                                                                                                                                                73KB

                                                                                                                                                                MD5

                                                                                                                                                                cf604c923aae437f0acb62820b25d0fd

                                                                                                                                                                SHA1

                                                                                                                                                                84db753fe8494a397246ccd18b3bb47a6830bc98

                                                                                                                                                                SHA256

                                                                                                                                                                e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4

                                                                                                                                                                SHA512

                                                                                                                                                                754219b05f2d81d11f0b54e5c7dd687bd82aa59a357a3074bca60fefd3a88102577db8ae60a11eb25cc9538af1da39d25fa6f38997bdc8184924d0c5920e89c8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                                                                                                                                                Filesize

                                                                                                                                                                27KB

                                                                                                                                                                MD5

                                                                                                                                                                f930621607e050dff86f94bbf4806b73

                                                                                                                                                                SHA1

                                                                                                                                                                d06bdf16d5794550b78713955629c465b6970676

                                                                                                                                                                SHA256

                                                                                                                                                                fe97ff9a43f7f196dcd9088da3818e6f80ecdc2ad8937a5bd4a52c8b3979a09e

                                                                                                                                                                SHA512

                                                                                                                                                                df4c634c95cbc63c44c0f884817333fdb3965d225fbcf008d134a12ea99d05965b043c4f74bbe57f8356fd7f698fde30fe34638387ffcb8ca1226fe7c8b00cb7

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                                                                                                                                                Filesize

                                                                                                                                                                40KB

                                                                                                                                                                MD5

                                                                                                                                                                3051c1e179d84292d3f84a1a0a112c80

                                                                                                                                                                SHA1

                                                                                                                                                                c11a63236373abfe574f2935a0e7024688b71ccb

                                                                                                                                                                SHA256

                                                                                                                                                                992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

                                                                                                                                                                SHA512

                                                                                                                                                                df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                                                                                                                                                Filesize

                                                                                                                                                                53KB

                                                                                                                                                                MD5

                                                                                                                                                                68f0a51fa86985999964ee43de12cdd5

                                                                                                                                                                SHA1

                                                                                                                                                                bbfc7666be00c560b7394fa0b82b864237a99d8c

                                                                                                                                                                SHA256

                                                                                                                                                                f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

                                                                                                                                                                SHA512

                                                                                                                                                                3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

                                                                                                                                                                Filesize

                                                                                                                                                                63KB

                                                                                                                                                                MD5

                                                                                                                                                                e4cc1ece2f2425b10ae2ccc212c1dafc

                                                                                                                                                                SHA1

                                                                                                                                                                92609e6d0093693110baa23758382889bcb30da6

                                                                                                                                                                SHA256

                                                                                                                                                                92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809

                                                                                                                                                                SHA512

                                                                                                                                                                2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

                                                                                                                                                                Filesize

                                                                                                                                                                62KB

                                                                                                                                                                MD5

                                                                                                                                                                6b04ab52540bdc8a646d6e42255a6c4b

                                                                                                                                                                SHA1

                                                                                                                                                                4cdfc59b5b62dafa3b20d23a165716b5218aa646

                                                                                                                                                                SHA256

                                                                                                                                                                33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d

                                                                                                                                                                SHA512

                                                                                                                                                                4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

                                                                                                                                                                Filesize

                                                                                                                                                                31KB

                                                                                                                                                                MD5

                                                                                                                                                                c03ff64e7985603de96e7f84ec7dd438

                                                                                                                                                                SHA1

                                                                                                                                                                dfc067c6cb07b81281561fdfe995aca09c18d0e9

                                                                                                                                                                SHA256

                                                                                                                                                                0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526

                                                                                                                                                                SHA512

                                                                                                                                                                bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008e

                                                                                                                                                                Filesize

                                                                                                                                                                18KB

                                                                                                                                                                MD5

                                                                                                                                                                c83e4437a53d7f849f9d32df3d6b68f3

                                                                                                                                                                SHA1

                                                                                                                                                                fabea5ad92ed3e2431659b02e7624df30d0c6bbc

                                                                                                                                                                SHA256

                                                                                                                                                                d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

                                                                                                                                                                SHA512

                                                                                                                                                                c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008f

                                                                                                                                                                Filesize

                                                                                                                                                                18KB

                                                                                                                                                                MD5

                                                                                                                                                                115c2d84727b41da5e9b4394887a8c40

                                                                                                                                                                SHA1

                                                                                                                                                                44f495a7f32620e51acca2e78f7e0615cb305781

                                                                                                                                                                SHA256

                                                                                                                                                                ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

                                                                                                                                                                SHA512

                                                                                                                                                                00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000091

                                                                                                                                                                Filesize

                                                                                                                                                                18KB

                                                                                                                                                                MD5

                                                                                                                                                                8eff0b8045fd1959e117f85654ae7770

                                                                                                                                                                SHA1

                                                                                                                                                                227fee13ceb7c410b5c0bb8000258b6643cb6255

                                                                                                                                                                SHA256

                                                                                                                                                                89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

                                                                                                                                                                SHA512

                                                                                                                                                                2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011c

                                                                                                                                                                Filesize

                                                                                                                                                                212KB

                                                                                                                                                                MD5

                                                                                                                                                                2257803a7e34c3abd90ec6d41fd76a5a

                                                                                                                                                                SHA1

                                                                                                                                                                f7a32e6635d8513f74bd225f55d867ea56ae4803

                                                                                                                                                                SHA256

                                                                                                                                                                af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174

                                                                                                                                                                SHA512

                                                                                                                                                                e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011f

                                                                                                                                                                Filesize

                                                                                                                                                                20KB

                                                                                                                                                                MD5

                                                                                                                                                                87e8230a9ca3f0c5ccfa56f70276e2f2

                                                                                                                                                                SHA1

                                                                                                                                                                eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                                                                                                                                                SHA256

                                                                                                                                                                e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                                                                                                                                                SHA512

                                                                                                                                                                37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                Filesize

                                                                                                                                                                6KB

                                                                                                                                                                MD5

                                                                                                                                                                0b20a2db27f8f45ffe56833f44c17299

                                                                                                                                                                SHA1

                                                                                                                                                                23d8a45e5f93c73d2f59d93377b807b72ebe88f1

                                                                                                                                                                SHA256

                                                                                                                                                                c36de6bd2959f11242efbc11c8d8220ce938fe0020a21a37ffa3101b89b39d41

                                                                                                                                                                SHA512

                                                                                                                                                                46d7f2a4242a3818504544a45b09300d687c8208fba3464e4a79d31e2c540514174e3eca72ec5d1186796693c257e0fde184fd6a42e90eab9ad9d5d1519b74a3

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                Filesize

                                                                                                                                                                6KB

                                                                                                                                                                MD5

                                                                                                                                                                a1e881b151b457f782ce005fdcfa10a3

                                                                                                                                                                SHA1

                                                                                                                                                                2a53ea906bbf6e938426eab96a5a0485ff76020a

                                                                                                                                                                SHA256

                                                                                                                                                                fbb421e604fa8393c215307911b34ccafb0e720c3479cf369454b92a3e55f826

                                                                                                                                                                SHA512

                                                                                                                                                                53902c525e54015d43117b6af7e7f1891ea8b3b69fdde27b87cba52f282d89c90640ae1ae41738d9df9b8d5e9b6db876ea139e85ec445fd05e32d339d26f5fb5

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001

                                                                                                                                                                Filesize

                                                                                                                                                                41B

                                                                                                                                                                MD5

                                                                                                                                                                5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                                                                                                SHA1

                                                                                                                                                                d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                                                                                                SHA256

                                                                                                                                                                f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                                                                                                SHA512

                                                                                                                                                                de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                Filesize

                                                                                                                                                                111B

                                                                                                                                                                MD5

                                                                                                                                                                285252a2f6327d41eab203dc2f402c67

                                                                                                                                                                SHA1

                                                                                                                                                                acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                                                                                SHA256

                                                                                                                                                                5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                                                                                SHA512

                                                                                                                                                                11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                Filesize

                                                                                                                                                                20KB

                                                                                                                                                                MD5

                                                                                                                                                                edf5afbb9c9500e04ab9649dc98ce524

                                                                                                                                                                SHA1

                                                                                                                                                                2fbcb041d5701338facbad04f3d7728b1ede7843

                                                                                                                                                                SHA256

                                                                                                                                                                4f2d6211095a9a62c2363c8d35367e7e588bb296185d0282845a9136886e9bcf

                                                                                                                                                                SHA512

                                                                                                                                                                5d0f1f7aaeda0d6ab10affe355a355c3161c5f3d8db691a4aded8d44909f1fc966c7aa9af4425d7231c8d753cb287c91153baba15d7d52027689d11c54efb490

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                Filesize

                                                                                                                                                                16KB

                                                                                                                                                                MD5

                                                                                                                                                                524883408253c9139de8fec1cdd83481

                                                                                                                                                                SHA1

                                                                                                                                                                eed3ba23dfd36908b286a8c557a38b52c5fdbf70

                                                                                                                                                                SHA256

                                                                                                                                                                5c98f4f0212c0714c1fd7633b3f7ba10a6b0f8c77731bde184e7a1188777e65d

                                                                                                                                                                SHA512

                                                                                                                                                                58c631b4e14d17ae079df19c52aeabc0dea721772987cd5030dadd2f2a05bae5b5c96ab1d4cc7139e83c4957c848a7742b086a74cad34bdd90d5615e32b2bb62

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                5KB

                                                                                                                                                                MD5

                                                                                                                                                                a987094f5cde08b5fde9da0633a11ed6

                                                                                                                                                                SHA1

                                                                                                                                                                a6efbe488d968a04e25709409a963779f4334c57

                                                                                                                                                                SHA256

                                                                                                                                                                3d6028e51e6b0584ac1e374c52dc28630fbf6b3701bfde48d3fe10c2fdaac2b0

                                                                                                                                                                SHA512

                                                                                                                                                                edfa31edfbccd09ac1bd44263e79a80dd3b812574b3478bb796cef933c88dfdc3f63b233d7e599a383fd445e9bde87830403f4f8a5d478632c3d49adb96560f1

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                10KB

                                                                                                                                                                MD5

                                                                                                                                                                de40197b55ab51fb46bd41084a7aa873

                                                                                                                                                                SHA1

                                                                                                                                                                c6641ccf2c7e4aee5f5d25a50488ab0213493240

                                                                                                                                                                SHA256

                                                                                                                                                                e8d56979a6410986524e1f857e20d0e9f0cc24766fa28ff2164f31d405a04021

                                                                                                                                                                SHA512

                                                                                                                                                                72b8d0a96886de38dc616580a080df252bb2c9e54712cc4278e18b8cd80b87577b63ff0bf066068cb0a8baf5bc61fbe7976aa0c0e8e4d878b3c449962db4428c

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                10KB

                                                                                                                                                                MD5

                                                                                                                                                                3e5d6ffe3f663fbe80004ed029d669e7

                                                                                                                                                                SHA1

                                                                                                                                                                4bd94cc262915cf5e2e5cf4376aef54638927484

                                                                                                                                                                SHA256

                                                                                                                                                                f163ed2fe82329857970db49e2256ebaeff5790e63de070022935e9ff381d843

                                                                                                                                                                SHA512

                                                                                                                                                                ce0a326f92618a0e682166aaeb6db3eb6ad734b034d9f11252efeb43238dddd3d8eb61f88f9704895bf1602f3f7c9cc3f4db264e346e12207da01c129df6111e

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                12KB

                                                                                                                                                                MD5

                                                                                                                                                                a6da34da1a06135cc8f9ecaf254e0725

                                                                                                                                                                SHA1

                                                                                                                                                                cb0df8d06b3b35967f8dbe4f1de235954addb15c

                                                                                                                                                                SHA256

                                                                                                                                                                7283f07b14226920f9dbecc1a4451d350d279bd7f0fcee1c4b895e5fa25e5954

                                                                                                                                                                SHA512

                                                                                                                                                                d18614757ab7679cf6ab07b9a7d663e7ecb7482f4cdacc97e873badcc76cbfcaca2b1e08a1fea8970ca95043dc0503ec407a12da66830db7b8f131cca3ca4299

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                19KB

                                                                                                                                                                MD5

                                                                                                                                                                9721c5149a5b2cb7468adccb93a3e6cd

                                                                                                                                                                SHA1

                                                                                                                                                                419b4856b96b8f9e7d233848e7c0c58ae66e4cc1

                                                                                                                                                                SHA256

                                                                                                                                                                bd1dc00cfb95bc6c29c4e4f51f4c3f110b02321e5d90bf15a65fcd47dae02174

                                                                                                                                                                SHA512

                                                                                                                                                                0f4901668e0551e6c682aca08482f71b870b90cb00a3c471fe108e29059d52ed459b022f4dea5e566a2c391e9a1356a71eff7d513b2e30d60836f0fd05364c2d

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                5KB

                                                                                                                                                                MD5

                                                                                                                                                                b40a28085e83d6648ec29dc1c3d38208

                                                                                                                                                                SHA1

                                                                                                                                                                16e16529a5e45b74ecaad0ba8ad35574b2ad67a8

                                                                                                                                                                SHA256

                                                                                                                                                                2a47e5765bc04b2a7872678c60fe1912ca4db6f2bd8b3de8178f3dfde54d50ed

                                                                                                                                                                SHA512

                                                                                                                                                                7df3efffbdaa966ed9aa7a4f729edd505506680d8e090d4f178a19898279d71ff9099dbb2e98ff946cbff2e7935556da385ee109fa6e6a1d963944aaf29f5701

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                6KB

                                                                                                                                                                MD5

                                                                                                                                                                138d800f66d022182812298410f75465

                                                                                                                                                                SHA1

                                                                                                                                                                7abd1832cd71bc20b09f2d17608cdef7eeb11651

                                                                                                                                                                SHA256

                                                                                                                                                                0e7213c52b3c04de3ff1b4fb0cce591da03563b3d9d17569311c8c0b418e4855

                                                                                                                                                                SHA512

                                                                                                                                                                5a9659eee5ffc326b1221e24e4b4337335dd9fc8ba4ff874bb4ec5f0f9867533545ca8e772776bf21ec4d2b495a61670e213ef4a3cc8295434c8f195d1e96e85

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                18KB

                                                                                                                                                                MD5

                                                                                                                                                                c6a76558a8ce890163fb06f039b881f3

                                                                                                                                                                SHA1

                                                                                                                                                                ac82e32387223a64c132cf01de1cd10fc000b49d

                                                                                                                                                                SHA256

                                                                                                                                                                f10b27a961fbf5ef67c24f9e55a1b6c383e1ae97dea2aa8a68f41d9515f3243d

                                                                                                                                                                SHA512

                                                                                                                                                                9eb01f98b98af30a885ef8d67f2b59b7f8e40a07bd81cf93f1ceb40750c06adb9616136d30c26b95dce3a9a1d81449fdce66f581b7563f863ebe119e7a910957

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                19KB

                                                                                                                                                                MD5

                                                                                                                                                                9728c1c498d6948d787e4f6bf14c65f4

                                                                                                                                                                SHA1

                                                                                                                                                                4334e8585e0dfdbc798283fcdab5587fc47449b1

                                                                                                                                                                SHA256

                                                                                                                                                                c93bbdc974416d853a3388a7e574cbfd705b437c9932c678024669b796123c94

                                                                                                                                                                SHA512

                                                                                                                                                                364c2ff10fb9c745b95d240ecf63e3a0cb5f9d1565d022ce716e1cdf256094708bdf5bcf7cafe0902f870a68421db61b68d2a182bac71111ba5739d10ccf4dd8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                18KB

                                                                                                                                                                MD5

                                                                                                                                                                c134bd4f1691d722bce62bf65ffb57ff

                                                                                                                                                                SHA1

                                                                                                                                                                952d26a89d18c1cf1bf695e87279fc5672572e43

                                                                                                                                                                SHA256

                                                                                                                                                                5a42633037dc87343517f196b52701ed293838f4629e4e4da35a68ac795cbb63

                                                                                                                                                                SHA512

                                                                                                                                                                d4b902f431afe5637312c6517e82088455abc106b2a685b705b3ea410537a1bb77eea7d3f269d1d9862240bf7a21bcf6b78949f4f5ca14793b5882f574ad8ace

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                19KB

                                                                                                                                                                MD5

                                                                                                                                                                710bef9d7f2007ec1a998e6ffd5e9b90

                                                                                                                                                                SHA1

                                                                                                                                                                9aaba0e0394c07f35800d89ca4ea6b31444dd0ee

                                                                                                                                                                SHA256

                                                                                                                                                                1c4388e7e0f5781cb8ae3056e8aa46164c52bea92296057038ee4c956698289c

                                                                                                                                                                SHA512

                                                                                                                                                                0f0c7271865404b6ed691967f00ae6835cfe812d4e3be46965d0785586474239b294934b82b5de8b0a246274565cb2941928e219411efc11e4d8dbff6d9e34f8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                Filesize

                                                                                                                                                                19KB

                                                                                                                                                                MD5

                                                                                                                                                                ea9cabeefc6a09504adf0c02c0f796ca

                                                                                                                                                                SHA1

                                                                                                                                                                ee443336fc3c73af06e1d99b6fcec04c635346c0

                                                                                                                                                                SHA256

                                                                                                                                                                fceca37e8581dadfd3be6ec2fde1f9c972a7cfcd60902cb75c2847389396715f

                                                                                                                                                                SHA512

                                                                                                                                                                8be2920b1aa4f77528fb85537e9b54a6e44383940f9b076a2e70bb0046c149b00f017cf76809ccd0f52f7301f6a2af454898b6c9f6f8cd9ef99720e25988b37e

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                                Filesize

                                                                                                                                                                264B

                                                                                                                                                                MD5

                                                                                                                                                                b7d5d25a90ccb0ad485bfce1c24289ad

                                                                                                                                                                SHA1

                                                                                                                                                                ae376af396da70f84328abbde3909c2cb4ce9cf9

                                                                                                                                                                SHA256

                                                                                                                                                                8da4b52eb514b003abc04791f39272a43d38f87a62fa9ea6267d44200c368bf2

                                                                                                                                                                SHA512

                                                                                                                                                                caf4742874524cff53cdbab3546d34c0ce3a542d5e17c2d2808b3c0c22a5aac730ced1eb2ea06bab37c0ffca8d24dc96e59342ddb17fc7c753c0859272582631

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                                Filesize

                                                                                                                                                                288B

                                                                                                                                                                MD5

                                                                                                                                                                ba0286b1887bac285b2410aa1efdceb8

                                                                                                                                                                SHA1

                                                                                                                                                                5ed55baab05a1613cffb21cd688aa624fd6922c6

                                                                                                                                                                SHA256

                                                                                                                                                                8e733f5cbce6e0b987c6d3b1c280ff31ef5bfa191539eff4aae63512c410b524

                                                                                                                                                                SHA512

                                                                                                                                                                1d7870191448251350a170e4e5d8eec290007f8e344aa713d557be84f95a4bc9e0a1560bf6c84bc2e2939e6b8fb546d3cc32d36bedeb50bf973779a75e44250d

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c29f.TMP

                                                                                                                                                                Filesize

                                                                                                                                                                48B

                                                                                                                                                                MD5

                                                                                                                                                                7d264d1af5b924c5e2af11a022f011a6

                                                                                                                                                                SHA1

                                                                                                                                                                4dc97c1ee28ff29ad394f6e0f5cefb7b0d53fe9b

                                                                                                                                                                SHA256

                                                                                                                                                                99a043a0350103f5a93576fb1a95c07ff643c8dd4596fe583805009018a9378e

                                                                                                                                                                SHA512

                                                                                                                                                                a55c580aec54569d04a3e51b49aaa68e4b217b99f20c985dc9dc4abeb3f8367715811dcfa3c08f03846248be5411fbfe29b0e22a4f918b221cb0b02c63d9694e

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                2KB

                                                                                                                                                                MD5

                                                                                                                                                                9cd5803d906f1296974d6d1355c60c9b

                                                                                                                                                                SHA1

                                                                                                                                                                8268215da4a441622e64d7b764e30cbd59aec344

                                                                                                                                                                SHA256

                                                                                                                                                                111468a48d3be3cf3c68b876d9653b247d434629236cbb1918b3a41910159d1b

                                                                                                                                                                SHA512

                                                                                                                                                                a3b708bba853e9f9aa45a59cd492c10a7226d919667b32d84c38da7bc49ba78e7450e27c66803d529ade0dca5ea6c116eb5cf9cec1862c52125380773a00db50

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                4KB

                                                                                                                                                                MD5

                                                                                                                                                                b69d24f35db612307cd9750f0ffea03b

                                                                                                                                                                SHA1

                                                                                                                                                                1fd78bf6754f92695cdc08e8d45000f2c5df5ce2

                                                                                                                                                                SHA256

                                                                                                                                                                9af5973ccd25d99c236aab79c0cdf69c419b89ff5c02484b4f2a79db97954cbe

                                                                                                                                                                SHA512

                                                                                                                                                                c1c82fb2562e209f7aa8e23d06e0dc73ac8ab7a3b968f589ccbdfc131b1c4a9097a9745e0f84057ebcce29fd291d454da628300433002f76b46020993be5c78f

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                6KB

                                                                                                                                                                MD5

                                                                                                                                                                b0b6d96f7d908b536771da189495450e

                                                                                                                                                                SHA1

                                                                                                                                                                7576d0d9ee8c1c7b973e8b2bbe4ef06ca0d92660

                                                                                                                                                                SHA256

                                                                                                                                                                960cf234c00fc18b675a598f25ae81b73ee74019d955d1c6f14efec71084d856

                                                                                                                                                                SHA512

                                                                                                                                                                cbe4d8e6a77248bbb036217f35c4cd88cb8f6204c7ae695c150e96316a52dca37bf81c14381e53401c5853fc1021f684f5c9e83fa5e3457f8ea3962f6439412a

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                8KB

                                                                                                                                                                MD5

                                                                                                                                                                641e891313dca17017f38f78293f237e

                                                                                                                                                                SHA1

                                                                                                                                                                e25877e5b96a974e7cf8468898ca95f8ff0a0c0c

                                                                                                                                                                SHA256

                                                                                                                                                                66fc02a14f924585974e728661b220df761c2814ad2d39cd2302095d4aeb6e4f

                                                                                                                                                                SHA512

                                                                                                                                                                205c2068c0eacf0a2d85532e86582be5baada387b9775ebc72a9dd37562d36ff5eb53a916cb017d7a9eb912fdf687d0ab633344957cc5c66aeb42772b0a278ad

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                8KB

                                                                                                                                                                MD5

                                                                                                                                                                91508b91090bb04f38ab484fbe5f873a

                                                                                                                                                                SHA1

                                                                                                                                                                b160705863461bfbabc407a4306a926bf85ccc2f

                                                                                                                                                                SHA256

                                                                                                                                                                293da67c0a67f1a3c0d156f5f51e8d72c02e3b3b5c85ca7d68b7c0a05b01fe84

                                                                                                                                                                SHA512

                                                                                                                                                                b272871a5efd8657faced720240a0ddbba2dd83fe1e9784642d136e0e84921927181c55983047c1ef92b80e611f90c6d987fd40b93499c4b1ddbfb177e654b5f

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                Filesize

                                                                                                                                                                8KB

                                                                                                                                                                MD5

                                                                                                                                                                dbf83fb7163a41ca4bb8837a1e47510d

                                                                                                                                                                SHA1

                                                                                                                                                                7607f012d4801655abfddec9b9bef812b21ed9f8

                                                                                                                                                                SHA256

                                                                                                                                                                89509a6b84775e185af1362b37b281ca8bce0fa525164624ef9ba30c19e8f123

                                                                                                                                                                SHA512

                                                                                                                                                                c4fcc6dec2a0e21abed9b1c90f6bb8daca3334d5e17e37d10385118bedbf06c665d0546f901fb762249b83945790805c0ec8005a31e55a69f9ae845cea41d0d8

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58077d.TMP

                                                                                                                                                                Filesize

                                                                                                                                                                1KB

                                                                                                                                                                MD5

                                                                                                                                                                5c3a546d36687cd969aece5a4f41ea1e

                                                                                                                                                                SHA1

                                                                                                                                                                7cf33fe730511c9cde0052efa4c465e486c42d91

                                                                                                                                                                SHA256

                                                                                                                                                                55fc6688a9ae5f987eed7ec972b562f397d0ea0a019d886ca3c1a221f6bf607e

                                                                                                                                                                SHA512

                                                                                                                                                                5ecb8141db50822ae6c7bd0a2bdaf851aeea4aa6f02a75040f96c65bbbcbe356ad83395a59da538712a0c219c8ebdca7a173cf14bbab5f157369875f41696a40

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                                                Filesize

                                                                                                                                                                16B

                                                                                                                                                                MD5

                                                                                                                                                                46295cac801e5d4857d09837238a6394

                                                                                                                                                                SHA1

                                                                                                                                                                44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                                                SHA256

                                                                                                                                                                0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                                                SHA512

                                                                                                                                                                8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                                                Filesize

                                                                                                                                                                16B

                                                                                                                                                                MD5

                                                                                                                                                                206702161f94c5cd39fadd03f4014d98

                                                                                                                                                                SHA1

                                                                                                                                                                bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                                                                                                SHA256

                                                                                                                                                                1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                                                                                                SHA512

                                                                                                                                                                0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                Filesize

                                                                                                                                                                11KB

                                                                                                                                                                MD5

                                                                                                                                                                aa7ad7b7acbebe6597db802d4ed86b24

                                                                                                                                                                SHA1

                                                                                                                                                                f643afac2b23510bbc22833d955e6b304a9d0f8b

                                                                                                                                                                SHA256

                                                                                                                                                                c7ea76cd92529c93622c03e6f715fbe79913180582d233671ae047286487e969

                                                                                                                                                                SHA512

                                                                                                                                                                dfbc9eb6e32d89b93c3d3cf675c6cc6b983d6f2c675fe943198dbfe719b99cc503ed25bfb02b730bba37be30e39ce88e81da2ce74fdb4ef2ac00b83bf27e198d

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                Filesize

                                                                                                                                                                11KB

                                                                                                                                                                MD5

                                                                                                                                                                5387ad5adf7910477e307f3432796bae

                                                                                                                                                                SHA1

                                                                                                                                                                b539c5c4ba5be596831bb3da6649c4f51e9d148a

                                                                                                                                                                SHA256

                                                                                                                                                                007150ff4aa852e530ad77e87f2d168a3815e7dc9d78d4753ec52e7c2c27b5b3

                                                                                                                                                                SHA512

                                                                                                                                                                39a22a96d050eb8ac0f6455d08fb8cdd3e677efbeba4448e2417a68b219ccf8362fc6fb9fb0cdfa44ebf130170e3f336d75cf237cbca0464ff391353ea5620aa

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                Filesize

                                                                                                                                                                11KB

                                                                                                                                                                MD5

                                                                                                                                                                81da323bc4b4f0627c910edd427cd119

                                                                                                                                                                SHA1

                                                                                                                                                                8600abe154d56deef03cf1287f2da72f75c30997

                                                                                                                                                                SHA256

                                                                                                                                                                2ed0c6f9b7d1ced8d6bc44e6955e83a7a7f049fa77278f094585cafb279ebf94

                                                                                                                                                                SHA512

                                                                                                                                                                9ade4d7fd106aac499b8bd084133f068d385193327e76f4e9a952f2c5844d8c5962d5025ed4675181eb73653b6c7a4f57efac3e40ba33b8ee43d9ef50cfdc634

                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                Filesize

                                                                                                                                                                11KB

                                                                                                                                                                MD5

                                                                                                                                                                3859bca0db4e294cdcfb018bdda9bde1

                                                                                                                                                                SHA1

                                                                                                                                                                af8a0f6d6af66eacc09f755cad6a5a9c051c36ed

                                                                                                                                                                SHA256

                                                                                                                                                                aa1fdef0fad96a07299ba5ce7278158084c4625cc3c796b462ad05ed950c73b3

                                                                                                                                                                SHA512

                                                                                                                                                                99eeab844bcfbcb5170f136730145d1f43153e0788f29a465535aabd04982fc5f63cf36eb0b405ac573d98267dd89099a5b61307ddc6decbe073dc66ba9d0ab6

                                                                                                                                                              • memory/908-1977-0x00007FFAB2740000-0x00007FFAB2774000-memory.dmp

                                                                                                                                                                Filesize

                                                                                                                                                                208KB

                                                                                                                                                              • memory/908-1976-0x00007FF74F540000-0x00007FF74F638000-memory.dmp

                                                                                                                                                                Filesize

                                                                                                                                                                992KB

                                                                                                                                                              • memory/908-1978-0x00007FFA9D350000-0x00007FFA9D606000-memory.dmp

                                                                                                                                                                Filesize

                                                                                                                                                                2.7MB

                                                                                                                                                              • memory/908-1979-0x00007FFA9C090000-0x00007FFA9D140000-memory.dmp

                                                                                                                                                                Filesize

                                                                                                                                                                16.7MB