Overview

overview

8

Static

static

1

sample.html

windows10-2004-x64

8

Analysis

  • max time kernel
    304s
  • max time network
    288s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 13:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    sample.html

  • Size

    21KB

  • MD5

    f6b6b34c17158c47db7994a8a24c4e61

  • SHA1

    68c16abef315ee7a8ec620cb51e28d662452d231

  • SHA256

    0c5ef8ba45affb729366deeae57fe52dd9caecc375aefbe2af67238c93b95b50

  • SHA512

    0f0832f068a8b83d84e58d9e215c83d436f03bdb97db0f63d87179ac844e1949b655b37e2c306239695489e39ad4fde56125b00c545820cedca4da3c82eb4237

  • SSDEEP

    384:HNspa1ocy4v4lbGa9MvhpNj24YU+Crc2REu4Y0wM1ttgfcg1xCejiw:HH1ocy4wEa6JpNy4R1rAu4Y0wM1XWcqn

Score
8/10
discovery

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 63 IoCs
  • Drops file in Windows directory 6 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies registry class 26 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 55 IoCs
  • Suspicious use of AdjustPrivilegeToken 40 IoCs
  • Suspicious use of FindShellTrayWindow 43 IoCs
  • Suspicious use of SendNotifyMessage 29 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • NTFS ADS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5092
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff3b0a46f8,0x7fff3b0a4708,0x7fff3b0a4718
      2⤵
        PID:4220
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
        2⤵
          PID:4860
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:440
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
          2⤵
            PID:5088
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
            2⤵
              PID:5056
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
              2⤵
                PID:4332
              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5024 /prefetch:8
                2⤵
                  PID:520
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5024 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:2248
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
                  2⤵
                    PID:3704
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
                    2⤵
                      PID:4296
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
                      2⤵
                        PID:3504
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:1
                        2⤵
                          PID:4068
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
                          2⤵
                            PID:808
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
                            2⤵
                              PID:2528
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
                              2⤵
                                PID:1316
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5688 /prefetch:8
                                2⤵
                                  PID:3492
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
                                  2⤵
                                    PID:2220
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3424 /prefetch:1
                                    2⤵
                                      PID:2896
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
                                      2⤵
                                        PID:4360
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
                                        2⤵
                                          PID:3796
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
                                          2⤵
                                            PID:2696
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
                                            2⤵
                                              PID:3152
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1
                                              2⤵
                                                PID:2780
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
                                                2⤵
                                                  PID:4516
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1
                                                  2⤵
                                                    PID:2348
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
                                                    2⤵
                                                      PID:1604
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
                                                      2⤵
                                                        PID:5128
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7736 /prefetch:1
                                                        2⤵
                                                          PID:5136
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7508 /prefetch:1
                                                          2⤵
                                                            PID:5792
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1
                                                            2⤵
                                                              PID:5916
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8068 /prefetch:1
                                                              2⤵
                                                                PID:6084
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7864 /prefetch:1
                                                                2⤵
                                                                  PID:5352
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
                                                                  2⤵
                                                                    PID:2668
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1
                                                                    2⤵
                                                                      PID:5896
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7348 /prefetch:1
                                                                      2⤵
                                                                        PID:6076
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1
                                                                        2⤵
                                                                          PID:5340
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=8112 /prefetch:8
                                                                          2⤵
                                                                            PID:1100
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
                                                                            2⤵
                                                                              PID:5632
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7176 /prefetch:8
                                                                              2⤵
                                                                                PID:1792
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:1
                                                                                2⤵
                                                                                  PID:5216
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
                                                                                  2⤵
                                                                                    PID:6036
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6964 /prefetch:2
                                                                                    2⤵
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:880
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:1
                                                                                    2⤵
                                                                                      PID:812
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7216 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5644
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7664 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5548
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7404 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4168
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6544 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4728
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8164 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5724
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8052 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5788
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5864
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:832
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7116 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5096
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7592 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5340
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5144
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5328
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7188 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:4292
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1048 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5464
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7300 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:520
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8288 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:3568
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8244 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:3960
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:3304
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7608 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:908
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:4504
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:1236
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5716 /prefetch:8
                                                                                                                                2⤵
                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                PID:2568
                                                                                                                              • C:\Users\Admin\Downloads\Driver_Updater_setup.exe
                                                                                                                                "C:\Users\Admin\Downloads\Driver_Updater_setup.exe"
                                                                                                                                2⤵
                                                                                                                                • Executes dropped EXE
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:4532
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\is-GQFKL.tmp\Driver_Updater_setup.tmp
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\is-GQFKL.tmp\Driver_Updater_setup.tmp" /SL5="$D021C,6184781,811008,C:\Users\Admin\Downloads\Driver_Updater_setup.exe"
                                                                                                                                  3⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Drops file in Program Files directory
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  • Modifies registry class
                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                  PID:3544
                                                                                                                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
                                                                                                                                    "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /INSTALL
                                                                                                                                    4⤵
                                                                                                                                    • Checks computer location settings
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    • Modifies registry class
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:3540
                                                                                                                                    • C:\Windows\SysWOW64\schtasks.exe
                                                                                                                                      "C:\Windows\System32\schtasks.exe" /Delete /TN "PC HelpSoft Driver Updater Schedule" /F
                                                                                                                                      5⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      PID:3420
                                                                                                                                    • C:\Windows\SysWOW64\schtasks.exe
                                                                                                                                      "C:\Windows\System32\schtasks.exe" /Delete /TN "PC HelpSoft Driver Updater Monitoring" /F
                                                                                                                                      5⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      PID:5556
                                                                                                                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
                                                                                                                                    "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /START /INSTALLED
                                                                                                                                    4⤵
                                                                                                                                    • Checks computer location settings
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Checks system information in the registry
                                                                                                                                    • Drops file in System32 directory
                                                                                                                                    • Drops file in Windows directory
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:892
                                                                                                                                    • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
                                                                                                                                      "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /TRAY
                                                                                                                                      5⤵
                                                                                                                                      • Checks computer location settings
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                                      PID:2092
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\tmp8FDD.tmp_collect\PCHelpSoftDriverUpdater.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\tmp8FDD.tmp_collect\PCHelpSoftDriverUpdater.exe" /COLLECT
                                                                                                                                      5⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                      PID:5528
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://store.pchelpsoft.com/clickgate/join.aspx?ref=pchelpsoft.com&ujid=bYei6LivLdg%3D&mkey1=PH_DU_ESC_WORLD_PP_GO_CO_CTR-9-8-2024&key2=__Device_Bluetooth&uid=1020464&cmp=ADWORDS&key1=_&gclid=EAIaIQobChMIhJX78s_viAMV47GDBx35TxU8EAEYASAAEgJClfD_BwE&mkey5=www.pchelpsoft.com%2Fen%2Flp%2Fdriver-updater%2FLP19&src=SPC&HostBrowser=ED&software=driverupdater&mkey4=54bc5606-2dcf-1a65-de83-914985ac3637&visitorid=54bc5606-2dcf-1a65-de83-914985ac3637&mkey3=win_scan-reg&mkey6=0&mkey7=NO_TRIAL&mkey8=2
                                                                                                                                      5⤵
                                                                                                                                        PID:5860
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff3b0a46f8,0x7fff3b0a4708,0x7fff3b0a4718
                                                                                                                                          6⤵
                                                                                                                                            PID:832
                                                                                                                                      • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\DriverPro.exe
                                                                                                                                        "C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\DriverPro.exe"
                                                                                                                                        4⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • Drops file in Program Files directory
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        PID:1428
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,8637627112320191937,11909642360445227708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:5356
                                                                                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                    1⤵
                                                                                                                                      PID:4296
                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                      1⤵
                                                                                                                                        PID:4180
                                                                                                                                      • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                        C:\Windows\system32\AUDIODG.EXE 0x23c 0x2f4
                                                                                                                                        1⤵
                                                                                                                                          PID:388

                                                                                                                                        Network

                                                                                                                                        MITRE ATT&CK Enterprise v15

                                                                                                                                        Replay Monitor

                                                                                                                                        Loading Replay Monitor...

                                                                                                                                        Downloads

                                                                                                                                        • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          MD5

                                                                                                                                          f2c35e89f2345b98566fd3940dddaece

                                                                                                                                          SHA1

                                                                                                                                          2f7d5a413059f39acf216a2cfff7c2ad10839d97

                                                                                                                                          SHA256

                                                                                                                                          d35f58c72f11f74cd82df4ecf9afa4ed3c17181632e5324972877000d09bf111

                                                                                                                                          SHA512

                                                                                                                                          930b79aa061c311a5959b70c331a12abd506a6c087eb420efedaba8d5e31b6b76caf458927c19fdf0bb207f323d570c0531483df7e0f8dbe5f9503a69e0dbcc6

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Program Files (x86)\PC HelpSoft Driver Updater\sqlite3.dll
                                                                                                                                          Filesize

                                                                                                                                          640KB

                                                                                                                                          MD5

                                                                                                                                          842e8edbfbeffb9ef234a2da6d5980fe

                                                                                                                                          SHA1

                                                                                                                                          f76e944e5ac3c489d987a11a313b41dee3e813f3

                                                                                                                                          SHA256

                                                                                                                                          ec30f1214fa645b8e436142acab6cc9a07f5c4e3414b5e539a832df9237a7bb3

                                                                                                                                          SHA512

                                                                                                                                          1ca9449dffa72b274b842b3a1f2008d3f13c6f423e7ac466e2efb97fe2103e1aea052a5e8a9839083061154fb61ec870fbe8e35164b386a3aa0aaaf8064a0ed4

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Program Files (x86)\PC HelpSoft Driver Updater\unins000.exe
                                                                                                                                          Filesize

                                                                                                                                          3.0MB

                                                                                                                                          MD5

                                                                                                                                          9648391d67636e4fde190d62666672e5

                                                                                                                                          SHA1

                                                                                                                                          6db0251250d4405b793ced3e3719fa162103d47c

                                                                                                                                          SHA256

                                                                                                                                          ca6d36ac6a3ced0894a945c6cbf9e21fe5613d16d257d27f920dc80baffe9bb7

                                                                                                                                          SHA512

                                                                                                                                          11d094d1738e2d633661c9e847888ec88a77828f7db9fcf0d523c6a2b19de24ef645b776aa076beb0824cda6ccc6014f4d3e44624873c9a2ff421dcfc1d3a790

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          Filesize

                                                                                                                                          152B

                                                                                                                                          MD5

                                                                                                                                          ff63763eedb406987ced076e36ec9acf

                                                                                                                                          SHA1

                                                                                                                                          16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

                                                                                                                                          SHA256

                                                                                                                                          8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

                                                                                                                                          SHA512

                                                                                                                                          ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          Filesize

                                                                                                                                          152B

                                                                                                                                          MD5

                                                                                                                                          2783c40400a8912a79cfd383da731086

                                                                                                                                          SHA1

                                                                                                                                          001a131fe399c30973089e18358818090ca81789

                                                                                                                                          SHA256

                                                                                                                                          331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

                                                                                                                                          SHA512

                                                                                                                                          b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
                                                                                                                                          Filesize

                                                                                                                                          64KB

                                                                                                                                          MD5

                                                                                                                                          d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                          SHA1

                                                                                                                                          ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                          SHA256

                                                                                                                                          34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                          SHA512

                                                                                                                                          2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
                                                                                                                                          Filesize

                                                                                                                                          70KB

                                                                                                                                          MD5

                                                                                                                                          4308671e9d218f479c8810d2c04ea6c6

                                                                                                                                          SHA1

                                                                                                                                          dd3686818bc62f93c6ab0190ed611031f97fdfcf

                                                                                                                                          SHA256

                                                                                                                                          5addbdd4fe74ff8afc4ca92f35eb60778af623e4f8b5911323ab58a9beed6a9a

                                                                                                                                          SHA512

                                                                                                                                          5936b6465140968acb7ad7f7486c50980081482766002c35d493f0bdd1cc648712eebf30225b6b7e29f6f3123458451d71e62d9328f7e0d9889028bff66e2ad2

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
                                                                                                                                          Filesize

                                                                                                                                          63KB

                                                                                                                                          MD5

                                                                                                                                          710d7637cc7e21b62fd3efe6aba1fd27

                                                                                                                                          SHA1

                                                                                                                                          8645d6b137064c7b38e10c736724e17787db6cf3

                                                                                                                                          SHA256

                                                                                                                                          c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

                                                                                                                                          SHA512

                                                                                                                                          19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
                                                                                                                                          Filesize

                                                                                                                                          19KB

                                                                                                                                          MD5

                                                                                                                                          2e86a72f4e82614cd4842950d2e0a716

                                                                                                                                          SHA1

                                                                                                                                          d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                                          SHA256

                                                                                                                                          c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                                          SHA512

                                                                                                                                          7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
                                                                                                                                          Filesize

                                                                                                                                          77KB

                                                                                                                                          MD5

                                                                                                                                          48094ed032ef52879bf0d9638a5eb54d

                                                                                                                                          SHA1

                                                                                                                                          c06e85bbf7dd5dd874249ecb382a3387a72247b2

                                                                                                                                          SHA256

                                                                                                                                          095686d4e5b3e55a99f5a2f6de00132db6f9894d37802124ced12f5344154ee0

                                                                                                                                          SHA512

                                                                                                                                          ab834c1703d816811e80b3421415157aa22bd678b182b3f35a70113316f63a0938c261cc96c1c4e8cdcf5aff84cfd9ed2674e222938a7443480d57aec6ec82b4

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
                                                                                                                                          Filesize

                                                                                                                                          51KB

                                                                                                                                          MD5

                                                                                                                                          4c6c80281721933b01ca118baa87c219

                                                                                                                                          SHA1

                                                                                                                                          f572d710b5717467007dda3b426caafb7d9943e6

                                                                                                                                          SHA256

                                                                                                                                          de542236c4455366535244bfe6bbd4e05bcca39ed589738f40f6a87dc9a52a6a

                                                                                                                                          SHA512

                                                                                                                                          13662367c7792a31a2a2f1d19d253a64dfa398b726175815b0736650165282b42d06762fc0e36169cb0f4642b2ead1499052a9eb4846171d12e8db78564dbabf

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
                                                                                                                                          Filesize

                                                                                                                                          20KB

                                                                                                                                          MD5

                                                                                                                                          87e8230a9ca3f0c5ccfa56f70276e2f2

                                                                                                                                          SHA1

                                                                                                                                          eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                                                                                                                          SHA256

                                                                                                                                          e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                                                                                                                          SHA512

                                                                                                                                          37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
                                                                                                                                          Filesize

                                                                                                                                          90KB

                                                                                                                                          MD5

                                                                                                                                          1c5b04e0972857b49afe19361c817831

                                                                                                                                          SHA1

                                                                                                                                          f628472d4ec41ba2ea0148d8df028520949ce4ac

                                                                                                                                          SHA256

                                                                                                                                          13e82abfd9139bee548196f1a53f677bd272bbdada3ec45b327f41b4dc0092f9

                                                                                                                                          SHA512

                                                                                                                                          b6ce07ec9713693d1b6f0d78b09aae1d204baecbd51516a5ffcbc3323c7102b4e644d35b7408bcc984b119c27639fc5ad207ea275a0f3b364eff6131bc243dc3

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
                                                                                                                                          Filesize

                                                                                                                                          137KB

                                                                                                                                          MD5

                                                                                                                                          3598cba38e82d9ae277110e7500839b3

                                                                                                                                          SHA1

                                                                                                                                          918caf7c7df77305d4c3a99d32aaa6ed1a075e12

                                                                                                                                          SHA256

                                                                                                                                          a2d17b3eddad0c53d35b58c478ace81849c2e13efa280c20e3681f46f9a9798a

                                                                                                                                          SHA512

                                                                                                                                          a7d221755927c2d520830b93556ed140bd76dc2a25a5f99e1e1d30f7ca3edabe6dedd771ffecf4d6241d41e8832e47ffd6698ab0b22f291a505754d2bfdf6e0a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
                                                                                                                                          Filesize

                                                                                                                                          18KB

                                                                                                                                          MD5

                                                                                                                                          d3d71879529d7499ff1c58ab448640bf

                                                                                                                                          SHA1

                                                                                                                                          6a5190136344c0d18f40e7aa66f743345acf2a08

                                                                                                                                          SHA256

                                                                                                                                          f2b28dd3bf823579341040436d5543e261d70fc4d1ef2c28ce9e281c545b3ff0

                                                                                                                                          SHA512

                                                                                                                                          3bf45c5058223cbbbc6d9e4013450dafe5802948695df5831c317740c2c382a564d9163b9f4b599930b81f0626e30c6dc318aa0fdee49b89cce47300d27a1bf9

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
                                                                                                                                          Filesize

                                                                                                                                          25KB

                                                                                                                                          MD5

                                                                                                                                          05e9679509b61424a07cc4d4efb7247f

                                                                                                                                          SHA1

                                                                                                                                          db4fcfac1d89c7e4f0bdbea9023034b64a9dbd81

                                                                                                                                          SHA256

                                                                                                                                          31798b2630a882be758010dfa51b12026c8fd81f0e4068b38fd739cac78cba0b

                                                                                                                                          SHA512

                                                                                                                                          1cbe7343e19b41f3f116a93d598d7b67779d29c6bc0a7b086d112dfcc76fee60811290b67b5d2561751700be483f6cd460b9b4c8325397813314ba064e4c2208

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
                                                                                                                                          Filesize

                                                                                                                                          63KB

                                                                                                                                          MD5

                                                                                                                                          bc79925b2d6aa5eff3106ed475a5b970

                                                                                                                                          SHA1

                                                                                                                                          8e7613dbd44ac14e144f497b2355428a31af9856

                                                                                                                                          SHA256

                                                                                                                                          a0604ca1c2e79701f80be673cb6274b5781287b0b157793d4f8d5f43428ed0c0

                                                                                                                                          SHA512

                                                                                                                                          88081b2d5aadbbe5e913cdb1335c7bfc47a175898644b00ac089ba522ace7b40c072472c0f49a26078d894a232f6f19bb25bc22d856aaf8ab1bb101e20d597a4

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
                                                                                                                                          Filesize

                                                                                                                                          30KB

                                                                                                                                          MD5

                                                                                                                                          6fb26b39d8dcf2f09ef8aebb8a5ffe23

                                                                                                                                          SHA1

                                                                                                                                          578cac24c947a6d24bc05a6aa305756dd70e9ac3

                                                                                                                                          SHA256

                                                                                                                                          774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059

                                                                                                                                          SHA512

                                                                                                                                          c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021
                                                                                                                                          Filesize

                                                                                                                                          63KB

                                                                                                                                          MD5

                                                                                                                                          a5cc79fbd666432c461daec09604f082

                                                                                                                                          SHA1

                                                                                                                                          9a3df93d85aca657c5c8b60f9b4063128319647e

                                                                                                                                          SHA256

                                                                                                                                          9a7f91177674363a59d898f41192d993f0dab2ce2c93a180b6d1042ea4b9e279

                                                                                                                                          SHA512

                                                                                                                                          f93ebbb16738cae18477a0bd833098abee3a77880b8623ae2a462ee8e209487045121700e013dd0da1c7c3f5c9f24a56f02a5cba837df4ac1f33c9f6e3522c62

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023
                                                                                                                                          Filesize

                                                                                                                                          21KB

                                                                                                                                          MD5

                                                                                                                                          d6556465c4d3ff6f5b2ee406db3a2cec

                                                                                                                                          SHA1

                                                                                                                                          078d7cb311119bc759421a9d03d994b94032df34

                                                                                                                                          SHA256

                                                                                                                                          cb1ee69ec8273c0b4d30271d40a5e3173b8f7d63f81f3493b69ea8d2b72c070a

                                                                                                                                          SHA512

                                                                                                                                          ae468d398000caedf2c887b4a6cf167228fec68a44b2d06f64025d4ad3741463b9e69f0e493c67c546587283b1b973998012b9fb1586f87f7095e42fddf376ec

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024
                                                                                                                                          Filesize

                                                                                                                                          20KB

                                                                                                                                          MD5

                                                                                                                                          6c5eafccab3cf4e6b92dfbff01d675ab

                                                                                                                                          SHA1

                                                                                                                                          b459c7291910290b6c4a3f474781ea39ec8c3748

                                                                                                                                          SHA256

                                                                                                                                          bb862a8d484879925abff843e123e31149cb908092b0989fd9a27096c251514a

                                                                                                                                          SHA512

                                                                                                                                          2f626cca419b583e1dc84d30b9013e395937db596a299385a0f78700eee35ee39743ea8cc9d1d7176f32f0ddcb3c96b585d5fa0909571f9a883353b39ea55563

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025
                                                                                                                                          Filesize

                                                                                                                                          33KB

                                                                                                                                          MD5

                                                                                                                                          1aca735014a6bb648f468ee476680d5b

                                                                                                                                          SHA1

                                                                                                                                          6d28e3ae6e42784769199948211e3aa0806fa62c

                                                                                                                                          SHA256

                                                                                                                                          e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a

                                                                                                                                          SHA512

                                                                                                                                          808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026
                                                                                                                                          Filesize

                                                                                                                                          20KB

                                                                                                                                          MD5

                                                                                                                                          27a28a17041207e45e9c0c4e32944d75

                                                                                                                                          SHA1

                                                                                                                                          85e68e6f78201775603ff8eb89d406b8ee87f482

                                                                                                                                          SHA256

                                                                                                                                          f14154c32ebea98298065d61749f8ddd7c5acb94e3f85c79c2f16fd0dc12823f

                                                                                                                                          SHA512

                                                                                                                                          a6c21cba9096b299385e7486624474d9777ed116094203125e1deeceb4222b8b12d566165d3f3dc317b1789fa2f00f1083c9f919b679e145039b66cca964c345

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027
                                                                                                                                          Filesize

                                                                                                                                          57KB

                                                                                                                                          MD5

                                                                                                                                          64f9bceac6dc5ebae88f8342e0fc9574

                                                                                                                                          SHA1

                                                                                                                                          552e7d4749be75b48ab387cf5f2ba8378789f343

                                                                                                                                          SHA256

                                                                                                                                          2ce95f28916d86fd9f3e91b3f7c9558c739d56b327b4029cec55e57d00990830

                                                                                                                                          SHA512

                                                                                                                                          788a56e439cfa1f1e97381516ffefefd5aa58ec49f4c30a32ff1f6c6f22093bf253770b089bab663cb395d5bc6a95ccd6f5686042670b66d1d0400010db415e9

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029
                                                                                                                                          Filesize

                                                                                                                                          62KB

                                                                                                                                          MD5

                                                                                                                                          6b04ab52540bdc8a646d6e42255a6c4b

                                                                                                                                          SHA1

                                                                                                                                          4cdfc59b5b62dafa3b20d23a165716b5218aa646

                                                                                                                                          SHA256

                                                                                                                                          33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d

                                                                                                                                          SHA512

                                                                                                                                          4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a
                                                                                                                                          Filesize

                                                                                                                                          31KB

                                                                                                                                          MD5

                                                                                                                                          c03ff64e7985603de96e7f84ec7dd438

                                                                                                                                          SHA1

                                                                                                                                          dfc067c6cb07b81281561fdfe995aca09c18d0e9

                                                                                                                                          SHA256

                                                                                                                                          0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526

                                                                                                                                          SHA512

                                                                                                                                          bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2640d55b606b37c1_0
                                                                                                                                          Filesize

                                                                                                                                          158KB

                                                                                                                                          MD5

                                                                                                                                          bb5464ae58cf2e764b0ae5a208e1bad1

                                                                                                                                          SHA1

                                                                                                                                          39858529bd549c0de1487659c9d181d14ca9c83c

                                                                                                                                          SHA256

                                                                                                                                          46d073dfb42569e148cec0763d7fef28bc31e8af7565fac3dd0f781c3c18804e

                                                                                                                                          SHA512

                                                                                                                                          04a1d55e274599d7246868b84bc9c581ee30d644ac824a65f3af10ccba8f0986f120cb2b9d6e5ff53143b2ede6e326f9335eeaadccc9ced47264be295024f247

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f5efd53b3e79a0f_0
                                                                                                                                          Filesize

                                                                                                                                          54KB

                                                                                                                                          MD5

                                                                                                                                          2a5c45f483ddd837432ed5935ad9a3b9

                                                                                                                                          SHA1

                                                                                                                                          d87c8688e19d879fd5209c6fe64e64dcbcd6f06b

                                                                                                                                          SHA256

                                                                                                                                          5ed2d798db85553f6a9a2d3efd7c9c0e0ffc932b3e96a1704a86d4ff45a30a6a

                                                                                                                                          SHA512

                                                                                                                                          bea5b1b4726fcac281b7d93f938cc6deb4925df5838076e7519f32e74f0433917b0143d27db7e2025f6aea89354ddcc73d34277c7e8b9af7122882042d19ade2

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a5749c627ee5ae3_0
                                                                                                                                          Filesize

                                                                                                                                          276B

                                                                                                                                          MD5

                                                                                                                                          4c39df9b10bf350cae678df568bade10

                                                                                                                                          SHA1

                                                                                                                                          4d7039dd4119d13d007b38fe00be7918f64156a8

                                                                                                                                          SHA256

                                                                                                                                          5ef9e0804438e595eab3e6c0b8983c684d3a400f7e9fff8593231fbc39d50f57

                                                                                                                                          SHA512

                                                                                                                                          b51cce2845f1108efcfa0c13844bb79dd50494aa6d50255e5e2ea4c597e7c800fd725b6c304a5e3384fb9e071a1ac4d58a0782ab98a0f3e4af087b91f9e1e059

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4580b6e9d146be3_0
                                                                                                                                          Filesize

                                                                                                                                          266B

                                                                                                                                          MD5

                                                                                                                                          ceb3494a5af8a700205435327e887f76

                                                                                                                                          SHA1

                                                                                                                                          f3275d390d5db06591c722905b623f58fdd82ad3

                                                                                                                                          SHA256

                                                                                                                                          6387fe3e16608c85d385a253d7a5a126efcae45ea79d4e6e2766e1bd154aeda9

                                                                                                                                          SHA512

                                                                                                                                          e130241ea84e05d075d7bb37f6a32bc89357a8b8777e24797d36d54e889b349180119013ee74e1d155c205945394d6fdcf6679b155802ff63824d4b064787252

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac4aa33546367add_0
                                                                                                                                          Filesize

                                                                                                                                          32KB

                                                                                                                                          MD5

                                                                                                                                          eec53fa1feabeb1c1b7ce06d2f05e4f8

                                                                                                                                          SHA1

                                                                                                                                          b6d524334445de17a59942a99989c9d275005022

                                                                                                                                          SHA256

                                                                                                                                          35930cbff34ac308522c84c7d71e2cc8046d8a0d8f672b29b8a1e144165a33cb

                                                                                                                                          SHA512

                                                                                                                                          ca89192154f2edbe423b32ce393602c5e6da88a8410a6d2647ca5671bb123a55b3da7b98d5fc205fe754996d039050fec91e1ff2158889b81a1cc974cd4921f3

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dc999ad4176d57fe_0
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          6da310e883d2dd9906f4ade7e1271c4a

                                                                                                                                          SHA1

                                                                                                                                          52cb16d1b147ab670a1190926a274f66ce1753f5

                                                                                                                                          SHA256

                                                                                                                                          f78dd0872ddc40885a403267ef83a4596ed9fd429757d35f89b0acfaf8520be6

                                                                                                                                          SHA512

                                                                                                                                          97025e4270d2f66a2d5f8a32f1a1d29a53fc7f3d4c4ce151d5929a3ed2edf31a550201978d8cdf9467fea61403b4526e2799507c5942402d4127067942602285

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0ad4fbf475759b8_0
                                                                                                                                          Filesize

                                                                                                                                          340KB

                                                                                                                                          MD5

                                                                                                                                          d4c10c28ab9b113503f48271734b3337

                                                                                                                                          SHA1

                                                                                                                                          ffe633435e6c2c2b7f416283892bed60ccd20678

                                                                                                                                          SHA256

                                                                                                                                          ae04eeb6b9de5058222235674d04d7a7321e1525b81f7f3ddae1991c2701333b

                                                                                                                                          SHA512

                                                                                                                                          265a45fbd799d15767b4ef403857b73d713bd65c911bfd44d4c48197eae6c6754e3e59873aded420135a451438fb1adb0558168f25c6cb7b081d25b052c572f8

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e5523096cdcc0171_0
                                                                                                                                          Filesize

                                                                                                                                          14KB

                                                                                                                                          MD5

                                                                                                                                          27b4b904a55080c3a7d900fce4c5df20

                                                                                                                                          SHA1

                                                                                                                                          5e75e175e57181d69b67e6bb572dbc3b6cbd0e76

                                                                                                                                          SHA256

                                                                                                                                          d0c94dbb6c4cca8057bff991502a133bc13e566173c0a566707b8c1c0b5beb3d

                                                                                                                                          SHA512

                                                                                                                                          0ce626d438594f0c6bc2baead5692e65b125adb5bc914703f7ed9c4e6361e327873b3d81113aaee53e4c2f58a6759536406bc8e1c10e594ffe40e50a02ff4b6a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ea290655e9759a29_0
                                                                                                                                          Filesize

                                                                                                                                          23KB

                                                                                                                                          MD5

                                                                                                                                          36d5aababde0bd37ca8a25c70cfccb3a

                                                                                                                                          SHA1

                                                                                                                                          560163ddc6bcf03e2e22b93c9cf485b77aa67365

                                                                                                                                          SHA256

                                                                                                                                          9c5e52a3a39c0efea3208ea1aa73f67219d56e992787ef465c343599d4e702c1

                                                                                                                                          SHA512

                                                                                                                                          687962a8d4751aa051416b79737592a76fcf67fc3a4f046b5686d7b2f9192709ad00ffbbd75f55b91425ec559db3fd1b9f0ef4b3881dcc833c014430eec5bd7c

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          3830bb5f25758298683a371184f2a2fc

                                                                                                                                          SHA1

                                                                                                                                          ddaae3391d7dcb67cb5bd3e891fa6658417609f6

                                                                                                                                          SHA256

                                                                                                                                          69abbf708dcaadb90c139fa933a7e8e9c3e788d67ef4db66ffae29dd6a6fd18d

                                                                                                                                          SHA512

                                                                                                                                          27a491ca81a40990f891f821a031a79bd0dc1b9e41b710a70e06b2d3cf7fb2a56fd16e110c74e372033f02bda03de537006ea1900aab2e7e301111b061439aed

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          c21ef017afb34e3946abd6e67c6567bb

                                                                                                                                          SHA1

                                                                                                                                          3b2092b7e3e6ec1dd385c3f9d2b1814732d9bc81

                                                                                                                                          SHA256

                                                                                                                                          0c887215044e9173d775e63947df1de89940114a8e45530e3b633beac5bec475

                                                                                                                                          SHA512

                                                                                                                                          18be57fdda63d14686f46ea56f72a5cb5663403b323bc74712421487b343b7a71b20a3cc811498fb7b4d4858d9f35ed9f11d11243ae8db15113146e02abb7f0c

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          1KB

                                                                                                                                          MD5

                                                                                                                                          78bf9cdc943ac57d09964083997e0fbd

                                                                                                                                          SHA1

                                                                                                                                          984fc42ee835ef6fb7c5adfdeae52b529cd474c4

                                                                                                                                          SHA256

                                                                                                                                          00282fde3a7e2e609aa5a831024b7811aa22250d52a0adb4793ca3da4f95d5cd

                                                                                                                                          SHA512

                                                                                                                                          1585a04d026a417ec6d8bdc1bc4b4e667afc24701240a118d914b4b3a520ebb23e58ab8bb9784e339a279ed4e9b179ccde054ac78e700cb8cdefec003497d5c9

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          2KB

                                                                                                                                          MD5

                                                                                                                                          f239c825f80cea6f8ab4d98d6ea26268

                                                                                                                                          SHA1

                                                                                                                                          e0b9dba210625ed457c1e1a56204cf28fcd6d304

                                                                                                                                          SHA256

                                                                                                                                          6285636da08834ec60fb21f1b6051450b537eeafb8548c09538979d002b548f5

                                                                                                                                          SHA512

                                                                                                                                          23fbe0a53ada6cb305ad872d1d5aeb15a0e5630da9ae1f7f32078e837ac890c38c2303ac23364c924e0014558298bd8b1784667d338d4b16a872bf1147df3e68

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          47589d1d1adaa2eb5d9c46ad37d58b8a

                                                                                                                                          SHA1

                                                                                                                                          68eaa96c04205b05cab96631dcbc19be1d7de66d

                                                                                                                                          SHA256

                                                                                                                                          e2bb5d2e8d90505dce34fad461ef7327dbafd750a093cd9ff466d887115781d4

                                                                                                                                          SHA512

                                                                                                                                          0064ffb83ca529d60665ee7cad4c60f52db82b8b5be843100cca90fc4d6ba07d8467c90a6678e69a7facf4056fe9ef34bdd7b48ea749169c824715bad551666a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          7fc03f6d2f67932d0010f442c505fcb2

                                                                                                                                          SHA1

                                                                                                                                          7b94d09621c1eae4e12af51f85ca189ee6b6d5a9

                                                                                                                                          SHA256

                                                                                                                                          5fa583bfc93793da9b3f6063b5d0debfee3af7c335b760bb83e30dc4161c1d4b

                                                                                                                                          SHA512

                                                                                                                                          89a0541e835633ee48538fbb73bd34828b5d56ad7f48af1f7dc4288e1f91dc24653a4ece5eeb3e71b60e187133cbe1b24207c182c3be139a4d804e8ace76a18a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          9KB

                                                                                                                                          MD5

                                                                                                                                          692abed51890833991a402fb9b386269

                                                                                                                                          SHA1

                                                                                                                                          74a1e4edfd5ceb85c301eaa33a15cb0d1ae3682b

                                                                                                                                          SHA256

                                                                                                                                          9487fecfdcb1844ca9b7e3b465b5497faf66a1508e3a379eb4b667226e4d31c5

                                                                                                                                          SHA512

                                                                                                                                          ccf803a994a86d254deb461434fdc07afd434159c25eff55b079e40d3979cd3ce8ef4f903789aa2fd3e2021f2962375a01ef67164ff25ffc2a9bc22b20cb1eb0

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          111B

                                                                                                                                          MD5

                                                                                                                                          807419ca9a4734feaf8d8563a003b048

                                                                                                                                          SHA1

                                                                                                                                          a723c7d60a65886ffa068711f1e900ccc85922a6

                                                                                                                                          SHA256

                                                                                                                                          aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                                                                                                                          SHA512

                                                                                                                                          f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          581B

                                                                                                                                          MD5

                                                                                                                                          c1af4ac3788503660e51678f1e5c8fb0

                                                                                                                                          SHA1

                                                                                                                                          3b619d976ae21780ce9ab5aa3defb143396cf7c1

                                                                                                                                          SHA256

                                                                                                                                          b9d2ad55b6f4ce1d3cd62fbf214dfa230bceb075c48fabccc62ad805eee9a232

                                                                                                                                          SHA512

                                                                                                                                          17f08a083ac525d329fb51f17cb30cce01ba43de9a15845c4fe5d69bf85cfe1987d314dee6b59b2a9af56d98a839ec1415970eaeffe2a5d92332e5c385ab9427

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          9KB

                                                                                                                                          MD5

                                                                                                                                          a572966555e03f4fac2668d5893b3274

                                                                                                                                          SHA1

                                                                                                                                          9c2b37969bf431660177d03410c7ad1ed373c7d6

                                                                                                                                          SHA256

                                                                                                                                          b0e37e1fe81a5b02791f819bf8350ab574baeb268536aebd8483d85f2d0b5a0b

                                                                                                                                          SHA512

                                                                                                                                          bd0701b86289001cbc46c802311f85c647f706482d3ab76d4b6d559395c0a85d3422f7deb1b042046176c33bf222ca18e6358c2894e3883ac8f450befb4bf200

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          111B

                                                                                                                                          MD5

                                                                                                                                          285252a2f6327d41eab203dc2f402c67

                                                                                                                                          SHA1

                                                                                                                                          acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                                                          SHA256

                                                                                                                                          5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                                                          SHA512

                                                                                                                                          11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                          Filesize

                                                                                                                                          10KB

                                                                                                                                          MD5

                                                                                                                                          f77295b8eb7b1f3fcdfd6c739d7dcdf0

                                                                                                                                          SHA1

                                                                                                                                          8e5f32cb6b9dff28108c5b2df51f46bfeb061ffe

                                                                                                                                          SHA256

                                                                                                                                          f195d21b44adb74a00979fac980b2325b4c9405a5339a2d8323e1051be4cc5a3

                                                                                                                                          SHA512

                                                                                                                                          05b0b3202f62483d14be7bb96479b98ba493aba906b1b3389bc95575858c00f4534aca7e518981090b2230e9251018577b5acd0c5b583c636fef9d19d9e4440e

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          6KB

                                                                                                                                          MD5

                                                                                                                                          32dbdcbcb4e0e14d76b17bcbbb2a7ff2

                                                                                                                                          SHA1

                                                                                                                                          29a683614d3d5de52515fc7704418c6a55a9ea6d

                                                                                                                                          SHA256

                                                                                                                                          031348eb88b08d7ac3f6dbbd0c102b21bacbcf5f524ec80d98a590cc410dcd2d

                                                                                                                                          SHA512

                                                                                                                                          ac44ed9c04e0311a9fd81a62236dfd3bbc5e71723f8c439a096e26e5251e7d35d6135c152b94595f6b410a6d3de28528964aa7c8381daf6073febc56178a303a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          6KB

                                                                                                                                          MD5

                                                                                                                                          d048bf958acf36d490a830a8207d34db

                                                                                                                                          SHA1

                                                                                                                                          8380c720dee5fc02861588ea3c3749557b8711f1

                                                                                                                                          SHA256

                                                                                                                                          fe075dcee33213a94ca32492bda9bbaff0fd831d164e5f824ce4ede5d7232f5f

                                                                                                                                          SHA512

                                                                                                                                          8a72b98eb34d2b84b8162fb6cadd458512250302f049eee06ad8835afdf87c8b8ce8f9191587c05651fb67173e2fe3d102bb2979af220f8be82656812eabe5b6

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          6KB

                                                                                                                                          MD5

                                                                                                                                          3dd4677f2eeed2d274f08d46cc2f5db2

                                                                                                                                          SHA1

                                                                                                                                          bbdbb831b3655aebf7ffac934d9b41fd2d332707

                                                                                                                                          SHA256

                                                                                                                                          0ff647128bbb613254a934e3ae0bbff2907949cbfd90d0f800defe48ead53dc4

                                                                                                                                          SHA512

                                                                                                                                          2e8cfbc00f33c9da42598781340a38c0a2f7b35deb701f6ee954197a884106e51f021ef3e72f7d9703b42bc53bcc94f65d072fceabe2b1a781fe8505d328639b

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          5KB

                                                                                                                                          MD5

                                                                                                                                          9e0cb18b113cc6fc0334e90d54d8bd20

                                                                                                                                          SHA1

                                                                                                                                          763f5188b46d1b7c00a044a131d6dd28aef3d40e

                                                                                                                                          SHA256

                                                                                                                                          e06718a9ff38ae27fb6a72696880f5536f1a88204699d042de17c24f10b429e7

                                                                                                                                          SHA512

                                                                                                                                          461710100557d2d268eebd30d20dfa807978201128bfacb7fefec60b9e03edcf2879e10c08888d943dc81c8891810db163061ba5c0401c13457d6576d122d429

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          9KB

                                                                                                                                          MD5

                                                                                                                                          15615d6de5c16f254ac64fce80dbd7ed

                                                                                                                                          SHA1

                                                                                                                                          a93651005f56208cee0c5259922d8f169196bd28

                                                                                                                                          SHA256

                                                                                                                                          1b3cfca7f590c887dbd52501724e5ba3cf8f229d487e53b4d640abc101478dcd

                                                                                                                                          SHA512

                                                                                                                                          a96de0d9ae99017322eccd297269d714063907be3e633c4217c17dec2611553bd79fcebb6f328a8933326ef9142fb6d92c8d2fa2636afb41f292d297e11f2622

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          14KB

                                                                                                                                          MD5

                                                                                                                                          f3d34ca31593754d2ed8ccab4599447d

                                                                                                                                          SHA1

                                                                                                                                          3ebbbbb054a8c3a9893198da7d637e299626902d

                                                                                                                                          SHA256

                                                                                                                                          3af49872db3e59331e35433090b7f4557ef4e6fe8c70ea878aecc93b933001be

                                                                                                                                          SHA512

                                                                                                                                          e8d062d53a1b932669dfe61b9538267ecc1e42bfa2f6fd741c755a223d2c38e9c44e56c200bbd711c192fc0e3ed5f164983a51ccfe219b224f9bab8facbce095

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          14KB

                                                                                                                                          MD5

                                                                                                                                          fd36d193931c7706449995d47c2d7407

                                                                                                                                          SHA1

                                                                                                                                          421a11d83a752e9b906b99b79e2836025cfa0a69

                                                                                                                                          SHA256

                                                                                                                                          9fa74dd5fa1fec323b58e9349f7fe24c41cbb3ccdf66d0a75ea0df2cb077d47f

                                                                                                                                          SHA512

                                                                                                                                          fb7d1febf8cca03bacb2d8b5764195a8b4696f99c2e27b23487189c72d316a1f23209bff8b1f6b5b07ce051c82ef99d7c6dc513fa9800098ea507da81965ad34

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          Filesize

                                                                                                                                          15KB

                                                                                                                                          MD5

                                                                                                                                          742946376f05841b19c1a0521064350d

                                                                                                                                          SHA1

                                                                                                                                          c1bdb9c1fa760d8fb4fd51376448e07747453002

                                                                                                                                          SHA256

                                                                                                                                          c0c074c9fedaa885c9979a0c34ef1a1dd39818de3c435ac5ecba3e2729b2998e

                                                                                                                                          SHA512

                                                                                                                                          bb787cf9b93522dbce01df144fe933a35ea532947c87c8b1a12a27e3772e19e0b1f382e55ad6b2f3f829202d3c6c785c0d00835b94d54306da9bdd363cc5dcb8

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                          Filesize

                                                                                                                                          120B

                                                                                                                                          MD5

                                                                                                                                          30379bd6dd031cad3ab6eb4a2cb7b890

                                                                                                                                          SHA1

                                                                                                                                          da2b7de0026b5e5128c9af35a1969d8f5b50ccc0

                                                                                                                                          SHA256

                                                                                                                                          8847cfac339b595436f47690bafc295d9a46a157487373e02a72d83c3a89e97c

                                                                                                                                          SHA512

                                                                                                                                          ce1418b91f1f71a71fbf78980037760b84efa729be1dda0d55dd94953e01a7aac737486950155eed4293b93ade4d89d3f698bf6371f57913423ade29637833bc

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59097c.TMP
                                                                                                                                          Filesize

                                                                                                                                          48B

                                                                                                                                          MD5

                                                                                                                                          61b9060ffb2ab05742c0f3bdda6862b8

                                                                                                                                          SHA1

                                                                                                                                          6fa89b75b2d3bb96f139f799b5c5c693a29e1690

                                                                                                                                          SHA256

                                                                                                                                          019aefa373a0b4cc2670641505c8de169a91c5f61b47a2869464d1a4e8aaf76e

                                                                                                                                          SHA512

                                                                                                                                          b4fccc70b5ed214420ae02b25a3b390267c68d46a5570f4cdd0412cbc881a8b2047706a880f013a554dd16168c0fad96d707726cac3e6ed95d5319636d33bdd2

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          6cb7f32ead4cfa7110cbe7936bcf3329

                                                                                                                                          SHA1

                                                                                                                                          ad54f80b4277be8a623bebfb0903ee13b48d3b5f

                                                                                                                                          SHA256

                                                                                                                                          0ef05e391285e573ddb2a154f3b4da6ce7ff7cad3906c8fb836837842111f787

                                                                                                                                          SHA512

                                                                                                                                          4cd8456fc812435bfbae0566e4158e3871044bec9f417060b1aaa1e8fb86f41068e7af38af253cef1cf92ce002bb0005f502f42643d05a20440384a9dd99233f

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          6acaa412606d87039c6ee5ce4fe136f9

                                                                                                                                          SHA1

                                                                                                                                          38afccd01a593f88b58b4935abdb44856a8cdb74

                                                                                                                                          SHA256

                                                                                                                                          4fa3e0edd7a17f12a25cac0c53e1053aed3c95c8de6cd0da3355f8e68e485760

                                                                                                                                          SHA512

                                                                                                                                          0b1fd891c0b4521736dcf166b7d64d824c5d7781e57c3e85ad7a3ac0380fcd2a6f03e8905611dd0240c1d099e651ccbc5554f49a320a1e3cb786f7b0d21930fa

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          3KB

                                                                                                                                          MD5

                                                                                                                                          4403c2380f9592d176e50b5ecb0fddcf

                                                                                                                                          SHA1

                                                                                                                                          6fe6754168378b3627c1843741b6200cad10da56

                                                                                                                                          SHA256

                                                                                                                                          d1ed1b3dc1894a3c8a93e193ff6ab7d5b7fd16d38ac8c071c9f9a0b14fdc5c8a

                                                                                                                                          SHA512

                                                                                                                                          ad7d62ea118757585cef7c776756a364a0f0bc1cd1a9aedc99f20f47bcd765b1d7b00b1ad61876c69003a4511464ac6cc73451967f8f62b811a8bc8707566c6e

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          69375357c805a94d6fe8ffd2e7310aff

                                                                                                                                          SHA1

                                                                                                                                          5888b368729ae58f3bccd870b5f6ecf20e570870

                                                                                                                                          SHA256

                                                                                                                                          50549c8d18f20a6e657173d88a1a3dd29696cbd02a24a0517565715777cb4c7c

                                                                                                                                          SHA512

                                                                                                                                          ed68743cc109d5fe16772e088f1987cbab2d77ab95c42e130ba501303b5d5839ff93a29adab5f508796b84949bf0fe43c11538144951f00b94233bf11f2d80bf

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          b0dae505b00edd08627f856dcce424b7

                                                                                                                                          SHA1

                                                                                                                                          1c10cebb3bf0a25a0cb1f3d607f8edd0d3f6ba52

                                                                                                                                          SHA256

                                                                                                                                          125e1394dce10cb27865b49564b84810a10d68efd7d6c532568bd46f31ec3120

                                                                                                                                          SHA512

                                                                                                                                          0248c8e8985dbd11a6c8cd0bbf733d46b12ca8e88188f89ad948b399db98fb0d5bda651e42ec824455755bb054404e6d6fbbc81f1e137a776277121f5f9620f8

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          541be2afb2ad41cea55feaa18b0b5c8b

                                                                                                                                          SHA1

                                                                                                                                          1e327ab4ebd9675d8660e592ef1dcc9989518a93

                                                                                                                                          SHA256

                                                                                                                                          6e58f58bbaa138bb14ab1a2ee91c3b7d9c608fb245008a6c7776c2e47a321678

                                                                                                                                          SHA512

                                                                                                                                          a33c69470bcc322b6589a26d56d6484733d08c4ded1074391ab360822bf8ed4ea619c6ad590edbfea5c591083e3ca8cf23d78e9d6edf377b9ed2ca2ad330c992

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          538B

                                                                                                                                          MD5

                                                                                                                                          1dd4d476bb92887e2ccbc9da21a95cca

                                                                                                                                          SHA1

                                                                                                                                          f2d6635b946c48d15b742559d50230ea95be96ec

                                                                                                                                          SHA256

                                                                                                                                          acb7009ad9bd0edeb1511dce7dd920c0013e9042d5502ba79ac0691a416c9a5a

                                                                                                                                          SHA512

                                                                                                                                          8abfa0ddc8c555f97e1e81bb6ff36a7d8d688b148e583013b72ac35ffaad5a05b3ea7295cfe256734b489b493827e9f8c31e052ed5a7edcddd6d38809cf97a18

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          f7bde9fe896ef30284131b8be4e8e089

                                                                                                                                          SHA1

                                                                                                                                          f0ff7116b7d6ea94ad71286f13f6f6e227efa8e7

                                                                                                                                          SHA256

                                                                                                                                          184ccc35e982119c64a82bcc4a0607fde13e311aa27855d21ececbb4a43fc624

                                                                                                                                          SHA512

                                                                                                                                          fab5c8cc4194788b0ec8fbeb82f77cec96e502169b7fb96dab4a1d6064b4ce3c8818cb320b980e95cfdab27bdc6237a151ba7fd0bba0eff59178c14493fc9047

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          27e3f1648f7cc77542fdd39523f90c5f

                                                                                                                                          SHA1

                                                                                                                                          6701aef88df6d31c027ae8fdc78b007d74698872

                                                                                                                                          SHA256

                                                                                                                                          fa8f24418613cb92270c2e90507b6dca65d913f2c53d5caf954d064f526364f5

                                                                                                                                          SHA512

                                                                                                                                          53b8d15b77a47f5874a926f25cb637a87f6874a9fc35b15954c07b9b4fcad6458371a36db51ee79b08d1f0d1433e7c796c39b4ae4e610049927cb05f87078aff

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                          Filesize

                                                                                                                                          4KB

                                                                                                                                          MD5

                                                                                                                                          2ef6410779e1c1ed9220b9c4433c1b36

                                                                                                                                          SHA1

                                                                                                                                          3edcbf99ed7c97f227c1be727951ddb5ecdc8586

                                                                                                                                          SHA256

                                                                                                                                          27bb49e3a118c49ebfdf4bf491b441e758e938898e678bf39eb055e35e9adbf1

                                                                                                                                          SHA512

                                                                                                                                          70558978a9a59e052981e0d1394795168ce758e1b085928b1765bd848d390697489d57a4ac4a882639698e4bc8deaa9b5b59f03c0f8f39884be360d9275909c6

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587a3c.TMP
                                                                                                                                          Filesize

                                                                                                                                          538B

                                                                                                                                          MD5

                                                                                                                                          da7fe3a5f858d3d119db5222d0fb10c5

                                                                                                                                          SHA1

                                                                                                                                          6e2007cb65f6081712b4b789f22878a32e6d1010

                                                                                                                                          SHA256

                                                                                                                                          000b4a8a0fae0cc6f70704ebb43fd9f2b25c69ae6117e835f5beac623863ab72

                                                                                                                                          SHA512

                                                                                                                                          f176e1299eb710c2beaef993ea0e948bd22d7c0bc07eb51f04191bc4620ee56bdce2f0fee65d670842478cf9e47ec8fccecaba9b66c8f4d5b97f55f11fe19788

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                          Filesize

                                                                                                                                          16B

                                                                                                                                          MD5

                                                                                                                                          6752a1d65b201c13b62ea44016eb221f

                                                                                                                                          SHA1

                                                                                                                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                          SHA256

                                                                                                                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                          SHA512

                                                                                                                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          Filesize

                                                                                                                                          11KB

                                                                                                                                          MD5

                                                                                                                                          1363c7d472dbf44e77d3c674f1dfb977

                                                                                                                                          SHA1

                                                                                                                                          c9b85f40a341ee955e53b7fa381ee36c3fed4bb7

                                                                                                                                          SHA256

                                                                                                                                          4701a6d6c4cfdb972bca13d1c069673252c58fe9520ca96aec5b507626b51b10

                                                                                                                                          SHA512

                                                                                                                                          877ebe112aa714ec265af81fc2637fbcfc9a9f3bcd9bc668475d3678f225b230faba62c8f421cbd917c889b43157f1c879dd3db6c183c166bd8c9b10d41d0910

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          Filesize

                                                                                                                                          11KB

                                                                                                                                          MD5

                                                                                                                                          e434ae1d16e8e73f57e5fea8859e3776

                                                                                                                                          SHA1

                                                                                                                                          9d843cdb6ca3be00a6714388da50610df91b7b55

                                                                                                                                          SHA256

                                                                                                                                          52ceaca94a27dae05d029db465ee94d017d0035d046f35906804fb001747004a

                                                                                                                                          SHA512

                                                                                                                                          496e37aa2d5cca5dedac5109e0789ecb07c3822b9ae2eeb01623f9cb83b49e917a56e96747af884a48c574dddbc0a574351dd9ab048604da3d57923526ab3ade

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          Filesize

                                                                                                                                          11KB

                                                                                                                                          MD5

                                                                                                                                          9f8e35ac7848e773198c735164d6a452

                                                                                                                                          SHA1

                                                                                                                                          764d2bd47ef58595affb3e16e3ac75019bdedb5e

                                                                                                                                          SHA256

                                                                                                                                          a4e34659f30ceb4a4817ce1369bc2e22741cb33b65baeb6026e947b27ab2ace0

                                                                                                                                          SHA512

                                                                                                                                          95ff3d035795a7173038534278f33febc412750387a6bfb5cb830b53fa8484ffcea3e7e6fb22f911d639868543dba66b5c3ced7182dcc7b58ef034f68fddce6a

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a58b2db5-9312-4495-964f-369c1af707aa.tmp
                                                                                                                                          Filesize

                                                                                                                                          10KB

                                                                                                                                          MD5

                                                                                                                                          e65e656a9fc0eab472f09341a29fe591

                                                                                                                                          SHA1

                                                                                                                                          867c1cd5c168c84a559f67c2a608ebecf2eda00b

                                                                                                                                          SHA256

                                                                                                                                          733b9c6739a03992e771a45b44f3420a9c02d9a62347c6380efa42b19490668c

                                                                                                                                          SHA512

                                                                                                                                          62cca986a66c497dbfef0c1d5eba35af0b5552edc7ec9a9b9757b32b54b9f52805eff1cbda836dc48524cf2ebc9879f6e76f0811763c8b886286cdd6d27102b8

                                                                                                                                          Download Submit

                                                                                                                                        • C:\Users\Admin\Downloads\Unconfirmed 967256.crdownload
                                                                                                                                          Filesize

                                                                                                                                          6.7MB

                                                                                                                                          MD5

                                                                                                                                          f551d956e1a94f8d1f80d18091dda803

                                                                                                                                          SHA1

                                                                                                                                          888a83cff19a55c9603c8aa9b5fa0723d50174a9

                                                                                                                                          SHA256

                                                                                                                                          20561e80a8d1af2aa7b80692a37eeecbe19fee51d72c55ae7d66735512b33952

                                                                                                                                          SHA512

                                                                                                                                          29d01f4baf397122eda8ddb08cebb8c593544f92cf559de48900d987301fa9d93d1c47be954bfee448ea42ec28fd11af348dabff2cea2dc3afffdd8a28c96b14

                                                                                                                                          Download Submit

                                                                                                                                        • memory/892-1318-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1414-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1362-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1363-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1326-0x00000000098C0000-0x00000000099C2000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          1.0MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1781-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1777-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1486-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1415-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1464-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1460-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1592-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1437-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1503-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1319-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1456-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/892-1499-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/1428-1302-0x0000000000400000-0x000000000093A000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          5.2MB

                                                                                                                                          Download

                                                                                                                                        • memory/1428-1303-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1417-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1594-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1783-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1462-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1488-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1458-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1501-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1439-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1505-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1320-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1321-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1466-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1376-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/2092-1779-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/3540-1279-0x00000000003E0000-0x0000000000C9C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download

                                                                                                                                        • memory/3540-1280-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/3544-1305-0x0000000000400000-0x000000000070F000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          3.1MB

                                                                                                                                          Download

                                                                                                                                        • memory/4532-1169-0x0000000000400000-0x00000000004D3000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          844KB

                                                                                                                                          Download

                                                                                                                                        • memory/4532-1306-0x0000000000400000-0x00000000004D3000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          844KB

                                                                                                                                          Download

                                                                                                                                        • memory/5528-1413-0x0000000060900000-0x0000000060993000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          588KB

                                                                                                                                          Download

                                                                                                                                        • memory/5528-1412-0x0000000000FC0000-0x000000000187C000-memory.dmp

                                                                                                                                          Filesize

                                                                                                                                          8.7MB

                                                                                                                                          Download