Analysis

  • max time kernel
    1304s
  • max time network
    1301s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13-12-2024 09:34

Errors

Reason
Machine shutdown

General

  • Target

    .html

  • Size

    1KB

  • MD5

    84238dfc8092e5d9c0dac8ef93371a07

  • SHA1

    4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047

  • SHA256

    ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9

  • SHA512

    d06b93c883f8126a04589937a884032df031b05518eed9d433efb6447834df2596aebd500d69b8283e5702d988ed49655ae654c1683c7a4ae58bfa6b92f2b73a

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 4 IoCs
  • A potential corporate email address has been identified in the URL: [email protected]
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 48 IoCs
  • Loads dropped DLL 43 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Installs/modifies Browser Helper Object 2 TTPs 8 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Checks system information in the registry 2 TTPs 24 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of NtCreateThreadExHideFromDebugger 6 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 39 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 25 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 7 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Enumerates system info in registry 2 TTPs 15 IoCs
  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 5 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 41 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of UnmapMainImage 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • System policy modification 1 TTPs 4 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\.html
    1⤵
    • Enumerates system info in registry
    • NTFS ADS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1616
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0xe4,0xdc,0x108,0xe0,0x10c,0x7ff9a8e43cb8,0x7ff9a8e43cc8,0x7ff9a8e43cd8
      2⤵
        PID:3648
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1876 /prefetch:2
        2⤵
          PID:1636
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3544
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2488 /prefetch:8
          2⤵
            PID:1008
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3088 /prefetch:1
            2⤵
              PID:2912
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1
              2⤵
                PID:4932
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5144 /prefetch:8
                2⤵
                • Suspicious behavior: EnumeratesProcesses
                PID:3468
              • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5312 /prefetch:8
                2⤵
                • Suspicious behavior: EnumeratesProcesses
                PID:352
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
                2⤵
                  PID:3076
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
                  2⤵
                    PID:3400
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
                    2⤵
                      PID:1860
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
                      2⤵
                        PID:1468
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2808 /prefetch:1
                        2⤵
                          PID:4928
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
                          2⤵
                            PID:1352
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
                            2⤵
                              PID:2768
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
                              2⤵
                                PID:3600
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
                                2⤵
                                  PID:4796
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
                                  2⤵
                                    PID:1564
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1
                                    2⤵
                                      PID:2580
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:1
                                      2⤵
                                        PID:4340
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=876 /prefetch:2
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:5040
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
                                        2⤵
                                          PID:1424
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6520 /prefetch:8
                                          2⤵
                                            PID:4364
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5048 /prefetch:8
                                            2⤵
                                            • Subvert Trust Controls: Mark-of-the-Web Bypass
                                            • NTFS ADS
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:2036
                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                            2⤵
                                            • Executes dropped EXE
                                            • Checks whether UAC is enabled
                                            • Drops file in Program Files directory
                                            • System Location Discovery: System Language Discovery
                                            • Enumerates system info in registry
                                            • Modifies Internet Explorer settings
                                            • Modifies registry class
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:1884
                                            • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
                                              MicrosoftEdgeWebview2Setup.exe /silent /install
                                              3⤵
                                              • Executes dropped EXE
                                              • Drops file in Program Files directory
                                              • System Location Discovery: System Language Discovery
                                              PID:3232
                                              • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeUpdate.exe
                                                "C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
                                                4⤵
                                                • Event Triggered Execution: Image File Execution Options Injection
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Checks system information in the registry
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious use of AdjustPrivilegeToken
                                                PID:2280
                                                • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Modifies registry class
                                                  PID:4776
                                                • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Modifies registry class
                                                  PID:332
                                                  • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                    6⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Modifies registry class
                                                    PID:4600
                                                  • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                    6⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Modifies registry class
                                                    PID:2612
                                                  • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                    6⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Modifies registry class
                                                    PID:4048
                                                • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjhENDk2NkEtNEQ0MC00QTFCLUE5OTQtNkMwNzAwQThDQjNCfSIgdXNlcmlkPSJ7QzJBMjk2RkItOTc1MC00RDFGLUFBMjctRDQwQjJGOUI2MTcxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBNzYwNDA4NC0wRTY1LTQwQ0EtODJGNi1DODExRTVDQkYyN0Z9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjYyNjE5NjQxMTAiIGluc3RhbGxfdGltZV9tcz0iNzQ3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Checks system information in the registry
                                                  • System Location Discovery: System Language Discovery
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:2012
                                                • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{28D4966A-4D40-4A1B-A994-6C0700A8CB3B}" /silent
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  PID:1112
                                            • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                              "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 1884
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Suspicious use of NtCreateThreadExHideFromDebugger
                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                              • Suspicious behavior: EnumeratesProcesses
                                              • Suspicious use of UnmapMainImage
                                              PID:4644
                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                            2⤵
                                            • Executes dropped EXE
                                            • Checks whether UAC is enabled
                                            • Drops file in Program Files directory
                                            • System Location Discovery: System Language Discovery
                                            • Enumerates system info in registry
                                            • Modifies Internet Explorer settings
                                            • Modifies registry class
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:2200
                                            • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                              "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 2200
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Suspicious use of NtCreateThreadExHideFromDebugger
                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                              • Suspicious behavior: EnumeratesProcesses
                                              • Suspicious use of UnmapMainImage
                                              PID:4984
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6628 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:660
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4932 /prefetch:8
                                            2⤵
                                              PID:3916
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=1220 /prefetch:8
                                              2⤵
                                              • Suspicious behavior: EnumeratesProcesses
                                              PID:1196
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
                                              2⤵
                                                PID:4708
                                              • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                                "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:gEKvbdFkIN8oAkwQpMuoQ-FcKzu54brxHWXv5H_Sti24Ffk3VGeR4_k3c_a3u5hjWaAzTvFh5Sm7gspmYkpr0gz0PhYCtAYAB8ln5dMgDQkYSXjQCIvFxIufk0Jz-uZ8cQpjK2yQkDHHaG15xPgUXKH5m-zWnZBjBmkvQhNAAY3mIco9pqtYBCN8nBI0Pl2LtbrWPgrJME2U2q-ago-5KT3afUVg_omG_F0M_CcGT7I+launchtime:1734084025643+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1734083505820001%26placeId%3D7772810845%26isPlayTogetherGame%3Dfalse%26referredByPlayerId%3D0%26joinAttemptId%3De6c3ee31-93db-485c-a91a-ea687bb120da%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1734083505820001+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp
                                                2⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Suspicious use of NtCreateThreadExHideFromDebugger
                                                • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious use of UnmapMainImage
                                                PID:5020
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1956 /prefetch:1
                                                2⤵
                                                  PID:4488
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5424 /prefetch:8
                                                  2⤵
                                                    PID:3124
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,10081594775049154799,10023169246641358837,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7052 /prefetch:8
                                                    2⤵
                                                    • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                    • NTFS ADS
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:2016
                                                  • C:\Users\Admin\Downloads\RobloxPlayerInstaller (1).exe
                                                    "C:\Users\Admin\Downloads\RobloxPlayerInstaller (1).exe"
                                                    2⤵
                                                    • Executes dropped EXE
                                                    • Checks whether UAC is enabled
                                                    • Drops file in Program Files directory
                                                    • System Location Discovery: System Language Discovery
                                                    • Enumerates system info in registry
                                                    • Modifies Internet Explorer settings
                                                    • Modifies registry class
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:1300
                                                    • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                                      "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 1300
                                                      3⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious use of NtCreateThreadExHideFromDebugger
                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      • Suspicious use of UnmapMainImage
                                                      PID:680
                                                • C:\Windows\System32\CompPkgSrv.exe
                                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                  1⤵
                                                    PID:2500
                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                    1⤵
                                                      PID:1424
                                                    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
                                                      1⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Checks system information in the registry
                                                      • System Location Discovery: System Language Discovery
                                                      • Modifies data under HKEY_USERS
                                                      PID:2456
                                                      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjhENDk2NkEtNEQ0MC00QTFCLUE5OTQtNkMwNzAwQThDQjNCfSIgdXNlcmlkPSJ7QzJBMjk2RkItOTc1MC00RDFGLUFBMjctRDQwQjJGOUI2MTcxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0REFBRkM2RS05REM3LTQ2RjEtQUI4Qy1CRjY4NkQ5MEFGMTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMjMuMC42MzEyLjEyMyIgbmV4dHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjI2NzMyNDMxMSIvPjwvYXBwPjwvcmVxdWVzdD4
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Checks system information in the registry
                                                        • System Location Discovery: System Language Discovery
                                                        • System Network Configuration Discovery: Internet Connection Discovery
                                                        PID:3064
                                                      • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\MicrosoftEdge_X64_131.0.2903.99.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\MicrosoftEdge_X64_131.0.2903.99.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
                                                        2⤵
                                                        • Executes dropped EXE
                                                        PID:4624
                                                        • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\EDGEMITMP_7F3D4.tmp\setup.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\EDGEMITMP_7F3D4.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\MicrosoftEdge_X64_131.0.2903.99.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Drops file in Program Files directory
                                                          • Drops file in Windows directory
                                                          PID:2576
                                                          • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\EDGEMITMP_7F3D4.tmp\setup.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\EDGEMITMP_7F3D4.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.140 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B080964B-0BFE-420B-83D8-92B803314C59}\EDGEMITMP_7F3D4.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.99 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff71b282918,0x7ff71b282924,0x7ff71b282930
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Drops file in Windows directory
                                                            PID:1304
                                                      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjhENDk2NkEtNEQ0MC00QTFCLUE5OTQtNkMwNzAwQThDQjNCfSIgdXNlcmlkPSJ7QzJBMjk2RkItOTc1MC00RDFGLUFBMjctRDQwQjJGOUI2MTcxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBMDREODdGNC04RUM3LTRDN0EtOTZDQi0zMEJDRTVGOTFGQ0J9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMzEuMC4yOTAzLjk5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MjgxNTU0MTA4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Checks system information in the registry
                                                        • System Location Discovery: System Language Discovery
                                                        • System Network Configuration Discovery: Internet Connection Discovery
                                                        PID:2516
                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                      1⤵
                                                        PID:1656
                                                      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:1624
                                                      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Checks system information in the registry
                                                        • System Location Discovery: System Language Discovery
                                                        • Modifies data under HKEY_USERS
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:4284
                                                        • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{6FC8AFBE-5FFE-45FC-BCD8-4A7961ED0EDA}\MicrosoftEdgeUpdateSetup_X86_1.3.195.39.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{6FC8AFBE-5FFE-45FC-BCD8-4A7961ED0EDA}\MicrosoftEdgeUpdateSetup_X86_1.3.195.39.exe" /update /sessionid "{68647684-29A4-4C10-90B9-CA3E02532FAA}"
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          PID:2336
                                                          • C:\Program Files (x86)\Microsoft\Temp\EU200F.tmp\MicrosoftEdgeUpdate.exe
                                                            "C:\Program Files (x86)\Microsoft\Temp\EU200F.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{68647684-29A4-4C10-90B9-CA3E02532FAA}"
                                                            3⤵
                                                            • Event Triggered Execution: Image File Execution Options Injection
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Checks system information in the registry
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of AdjustPrivilegeToken
                                                            PID:1944
                                                            • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              PID:1136
                                                            • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              PID:1300
                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                                5⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Modifies registry class
                                                                PID:1932
                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                                5⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Modifies registry class
                                                                PID:4776
                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                                                                5⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Modifies registry class
                                                                PID:2584
                                                            • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-PC9hcHA-PC9yZXF1ZXN0Pg
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Checks system information in the registry
                                                              • System Location Discovery: System Language Discovery
                                                              • System Network Configuration Discovery: Internet Connection Discovery
                                                              PID:5016
                                                        • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Njg2NDc2ODQtMjlBNC00QzEwLTkwQjktQ0EzRTAyNTMyRkFBfSIgdXNlcmlkPSJ7QzJBMjk2RkItOTc1MC00RDFGLUFBMjctRDQwQjJGOUI2MTcxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntDMDM1NDFDQi1DN0ZELTRGOUQtODIxNS0wRjFDMzRDQTI0QUV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE5NS4zOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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_UDE9MTczNDY4ODc2MyZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1CNFo2ODlCdDFZSHRaTjA0dGM4OWVUVVA4WHJlbjR3aFBwJTJmM1BIWUhIdSUyYndzQ2tXUW9udGUybnhWclF1RUF2WVcwNzlGUCUyZmtqR1lnZFp0ZTJESnNHdyUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSIwIiBkb3dubG9hZF90aW1lX21zPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwMzIxMzkzMzY0IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy8xN2I3NTIyMy1hMzVlLTQ0NGEtODBkNC1iYjk4OWNjZjJmNzM_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
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Checks system information in the registry
                                                          • System Location Discovery: System Language Discovery
                                                          • System Network Configuration Discovery: Internet Connection Discovery
                                                          PID:4024
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                        1⤵
                                                        • Drops file in Windows directory
                                                        • Enumerates system info in registry
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SendNotifyMessage
                                                        PID:3564
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff9953bcc40,0x7ff9953bcc4c,0x7ff9953bcc58
                                                          2⤵
                                                            PID:2964
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1676,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1868 /prefetch:2
                                                            2⤵
                                                              PID:1076
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1864,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2140 /prefetch:3
                                                              2⤵
                                                                PID:2532
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1976,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2188 /prefetch:8
                                                                2⤵
                                                                  PID:3704
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3092,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3204 /prefetch:1
                                                                  2⤵
                                                                    PID:3088
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3228,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3236 /prefetch:1
                                                                    2⤵
                                                                      PID:4628
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4440,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4472 /prefetch:1
                                                                      2⤵
                                                                        PID:1700
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4744,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4752 /prefetch:8
                                                                        2⤵
                                                                          PID:5096
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4964,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4912 /prefetch:8
                                                                          2⤵
                                                                            PID:2248
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4780,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4268 /prefetch:1
                                                                            2⤵
                                                                              PID:2044
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3444,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3352 /prefetch:8
                                                                              2⤵
                                                                                PID:5456
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3432,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3200 /prefetch:8
                                                                                2⤵
                                                                                  PID:5464
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5008,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3288 /prefetch:8
                                                                                  2⤵
                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                  PID:5236
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5168,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5236 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3088
                                                                                  • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                                                                    "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:JmzEm7ZT3Rtq-bl400KLWy2TDrMNvdbM7HQPqW0JwbIVXOPNS5Ie27-BCWZXfr90uQUdQu9Po9a7GAKS3YuO-ygTSGMppDP4Xri2Ga8El4gowDoT0ENvdwSr3v-9hBNb7zAQcg84Ck32-Pj6DIhZzI1T6gWI7cY1hp1oHtkDf4x_p4RpdiK-TsDJ-m6BIEjsrTV2amaf5xr9TSgeTyRbGs5qNXSVfFsJsEfCBevvNXQ+launchtime:1734084316970+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1734084165728004%26placeId%3D7848359510%26isPlayTogetherGame%3Dfalse%26referredByPlayerId%3D0%26joinAttemptId%3D7c6e30a7-c2f8-48f4-96a4-975137809bf3%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1734084165728004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp
                                                                                    2⤵
                                                                                    • Executes dropped EXE
                                                                                    • Loads dropped DLL
                                                                                    • Suspicious use of NtCreateThreadExHideFromDebugger
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    • Suspicious use of UnmapMainImage
                                                                                    PID:3680
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5052,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4976 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5672
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5188,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5328 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5988
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5200,i,10559602967565047165,7121356085862568384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5628 /prefetch:1
                                                                                        2⤵
                                                                                          PID:6048
                                                                                      • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                                        1⤵
                                                                                          PID:2144
                                                                                        • C:\Windows\system32\svchost.exe
                                                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                          1⤵
                                                                                            PID:1188
                                                                                          • C:\Windows\system32\svchost.exe
                                                                                            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                            1⤵
                                                                                              PID:2288
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
                                                                                              1⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              • System Location Discovery: System Language Discovery
                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                              PID:5432
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
                                                                                              1⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              • Checks system information in the registry
                                                                                              • System Location Discovery: System Language Discovery
                                                                                              • Modifies data under HKEY_USERS
                                                                                              PID:6024
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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
                                                                                                2⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • Checks system information in the registry
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                PID:5940
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\MicrosoftEdge_X64_131.0.2903.86.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\MicrosoftEdge_X64_131.0.2903.86.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
                                                                                                2⤵
                                                                                                • Executes dropped EXE
                                                                                                PID:3968
                                                                                                • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\MicrosoftEdge_X64_131.0.2903.86.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
                                                                                                  3⤵
                                                                                                  • Boot or Logon Autostart Execution: Active Setup
                                                                                                  • Executes dropped EXE
                                                                                                  • Installs/modifies Browser Helper Object
                                                                                                  • Drops file in Program Files directory
                                                                                                  • Drops file in Windows directory
                                                                                                  • Modifies Internet Explorer settings
                                                                                                  • Modifies registry class
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  • System policy modification
                                                                                                  PID:1900
                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.109 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.86 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff72d342918,0x7ff72d342924,0x7ff72d342930
                                                                                                    4⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Drops file in Windows directory
                                                                                                    PID:5484
                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
                                                                                                    4⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Drops file in System32 directory
                                                                                                    • Drops file in Windows directory
                                                                                                    • Modifies data under HKEY_USERS
                                                                                                    PID:2252
                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.109 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DCBD1299-3C63-43BF-98E3-EADB140C6AEF}\EDGEMITMP_C7029.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.86 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff72d342918,0x7ff72d342924,0x7ff72d342930
                                                                                                      5⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Drops file in Windows directory
                                                                                                      PID:5712
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-level
                                                                                                    4⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Drops file in Windows directory
                                                                                                    PID:5372
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.109 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.86 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff746902918,0x7ff746902924,0x7ff746902930
                                                                                                      5⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Drops file in Windows directory
                                                                                                      PID:5464
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --msedge --channel=stable --update-game-assist-package --verbose-logging --system-level
                                                                                                    4⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Drops file in Windows directory
                                                                                                    PID:5584
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.109 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.86\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.86 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff746902918,0x7ff746902924,0x7ff746902930
                                                                                                      5⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Drops file in Windows directory
                                                                                                      PID:992
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NEE0RTg2Q0EtRTgxRS00QUM0LTkxOEItMjg3NEYxQjFEMDdBfSIgdXNlcmlkPSJ7QzJBMjk2RkItOTc1MC00RDFGLUFBMjctRDQwQjJGOUI2MTcxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins1QTdBQ0JERS1GODhGLTRFNjAtQTA5RS1GQ0REN0ZFNEE3MzN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTk1LjM5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9IklzT25JbnRlcnZhbENvbW1hbmRzQWxsb3dlZD0lNUIlMjItdGFyZ2V0X2RldiUyMC1taW5fYnJvd3Nlcl92ZXJzaW9uX2NhbmFyeV9kZXYlMjAxMzMuMC4yOTcwLjAlMjIlNUQiIGluc3RhbGxhZ2U9IjAiIGNvaG9ydD0icnJmQDAuNzUiPjx1cGRhdGVjaGVjay8-PHBpbmcgcmQ9IjY1NTYiIHBpbmdfZnJlc2huZXNzPSJ7MDdFQjZGMUMtRUY0RC00QzdBLUIzQjAtQkU3OEM2MDRFM0IwfSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IjEzMS4wLjI5MDMuODYiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaXNfcGlubmVkX3N5c3RlbT0idHJ1ZSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzc4NTU3MDY1OTE1OTIwMCI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSIxMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTM4Nzc2ODI2NTEiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTM4Nzc5OTUwMjciIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxNCIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDcwMjM4MzgiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDU4Njg3NTg3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJkbyIgdXJsPSJodHRwOi8vbXNlZGdlLmIudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvMDk3MDVlYjItMWNmNC00NmJmLWJkMTItODEwOWIzMGMzMjI3P1AxPTE3MzQ2ODkxODkmYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9alllS1N2Rm40RWg1VzBzd0hUUUtPVUU1bzlyVGJHMjVVS082empmQVNkM05sMERsMHBnYVZ3cUlnYmdRN2NuOFVQTjRzc1l3NUIyR0M1T3NMOFphUUElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIwIiB0b3RhbD0iMCIgZG93bmxvYWRfdGltZV9tcz0iMCIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNDQ1ODcyNzc2NSIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0iYml0cyIgdXJsPSJodHRwOi8vbXNlZGdlLmIudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvMDk3MDVlYjItMWNmNC00NmJmLWJkMTItODEwOWIzMGMzMjI3P1AxPTE3MzQ2ODkxODkmYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9alllS1N2Rm40RWg1VzBzd0hUUUtPVUU1bzlyVGJHMjVVS082empmQVNkM05sMERsMHBnYVZ3cUlnYmdRN2NuOFVQTjRzc1l3NUIyR0M1T3NMOFphUUElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIxNzY2NzY0MDgiIHRvdGFsPSIxNzY2NzY0MDgiIGRvd25sb2FkX3RpbWVfbXM9IjUwMjgzIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDU4ODY3Nzk0IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDc3OTE3NTUyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNTEzMDQ2MjcwNCIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjExMTYiIGRvd25sb2FkX3RpbWVfbXM9IjU4MDM5IiBkb3dubG9hZGVkPSIxNzY2NzY0MDgiIHRvdGFsPSIxNzY2NzY0MDgiIHBhY2thZ2VfY2FjaGVfcmVzdWx0PSIwIiBpbnN0YWxsX3RpbWVfbXM9IjY1MjQ0Ii8-PHBpbmcgYWN0aXZlPSIxIiBhZD0iNjU1NiIgcmQ9IjY1NTYiIHBpbmdfZnJlc2huZXNzPSJ7OTM2RjNEOTEtMkIwMy00N0U2LUE3NEMtQTVBMDVGNDQxMUE0fSIvPjwvYXBwPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIxMzEuMC4yOTAzLjk5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgY29ob3J0PSJycmZAMC40NSIgdXBkYXRlX2NvdW50PSIxIj48dXBkYXRlY2hlY2svPjxwaW5nIHJkPSI2NTU2IiBwaW5nX2ZyZXNobmVzcz0ie0NBMTYzMkY2LUFENDktNDI5MS1CNDU1LTMwNTVBMkQ2QTc4RH0iLz48L2FwcD48L3JlcXVlc3Q-
                                                                                                2⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • Checks system information in the registry
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                PID:5112
                                                                                            • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
                                                                                              "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
                                                                                              1⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              • Suspicious use of NtCreateThreadExHideFromDebugger
                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                              • Suspicious use of UnmapMainImage
                                                                                              PID:3852
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
                                                                                              1⤵
                                                                                              • Enumerates system info in registry
                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                              • Suspicious use of SendNotifyMessage
                                                                                              PID:400
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff9a8e43cb8,0x7ff9a8e43cc8,0x7ff9a8e43cd8
                                                                                                2⤵
                                                                                                  PID:496
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2632 /prefetch:2
                                                                                                  2⤵
                                                                                                    PID:4608
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2680 /prefetch:3
                                                                                                    2⤵
                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                    PID:3196
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
                                                                                                    2⤵
                                                                                                      PID:2392
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:3496
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:624
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:4776
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:3296
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4112 /prefetch:8
                                                                                                              2⤵
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              PID:2868
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5468 /prefetch:8
                                                                                                              2⤵
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              PID:3260
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:2116
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:1540
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5392
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:2944
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:4708
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5284
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5052
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1480 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5628
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:5544
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:5700
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6732 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5968
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7052 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:5928
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6704 /prefetch:8
                                                                                                                                      2⤵
                                                                                                                                      • NTFS ADS
                                                                                                                                      PID:2976
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2616,8687575300318103742,582213086225505785,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6664 /prefetch:2
                                                                                                                                      2⤵
                                                                                                                                        PID:3968
                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                      1⤵
                                                                                                                                        PID:3184
                                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                        1⤵
                                                                                                                                          PID:424
                                                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                          1⤵
                                                                                                                                            PID:1688
                                                                                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Ransomware.Petya\26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.txt
                                                                                                                                            1⤵
                                                                                                                                            • Opens file in notepad (likely ransom note)
                                                                                                                                            PID:2448
                                                                                                                                          • C:\Users\Admin\Downloads\Ransomware.Petya\26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
                                                                                                                                            "C:\Users\Admin\Downloads\Ransomware.Petya\26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe"
                                                                                                                                            1⤵
                                                                                                                                            • Writes to the Master Boot Record (MBR)
                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                            PID:900

                                                                                                                                          Network

                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.86\Installer\setup.exe

                                                                                                                                            Filesize

                                                                                                                                            6.6MB

                                                                                                                                            MD5

                                                                                                                                            69221ee7ef83d7eb340857b5833eea14

                                                                                                                                            SHA1

                                                                                                                                            d7f27c64b62eefe2c204a323cc812fa56f58ce1e

                                                                                                                                            SHA256

                                                                                                                                            ad14d7268ee8a9c3c89e7cf62a8a9b713c9f37069fe85b3f8fe525dcda8cdfc9

                                                                                                                                            SHA512

                                                                                                                                            8df73f03d7438082b9e8793f5346a7385c91139d879703dd8c32acfdacb200c18231a5a9cedd7836c892ebb7a8888857c68653728b9027ca1f483a1751fbe2e3

                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.99\Installer\setup.exe

                                                                                                                                            Filesize

                                                                                                                                            6.6MB

                                                                                                                                            MD5

                                                                                                                                            f6ef6691c60c40c1b64c857aa7140f65

                                                                                                                                            SHA1

                                                                                                                                            0a18181edb6539ace366e7d804e37ec558c52b79

                                                                                                                                            SHA256

                                                                                                                                            df10339c63d2f24162ffa7d61c797f46a4ec4d91f1f74c3290646a232c7e9c56

                                                                                                                                            SHA512

                                                                                                                                            bf2829c18f109ee181518b7819a23782fdee4f81644a9d062e060ccac7a2df27d2f49cb3c26d63e6c9e2aed6ff166f2af596c0365284ef1dc0a70363ea8fd404

                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.195.39\MicrosoftEdgeUpdateSetup_X86_1.3.195.39.exe

                                                                                                                                            Filesize

                                                                                                                                            1.6MB

                                                                                                                                            MD5

                                                                                                                                            2516fc0d4a197f047e76f210da921f98

                                                                                                                                            SHA1

                                                                                                                                            2a929920af93024e8541e9f345d623373618b249

                                                                                                                                            SHA256

                                                                                                                                            fd424062ff3983d0edd6c47ab87343a15e52902533e3d5f33f1b0222f940721c

                                                                                                                                            SHA512

                                                                                                                                            1606c82f41ca6cbb58e522e03a917ff252715c3c370756977a9abd713aa12e37167a30f6f5de252d431af7e4809ae1e1850c0f33d4e8fc11bab42b224598edc8

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\EdgeUpdate.dat

                                                                                                                                            Filesize

                                                                                                                                            12KB

                                                                                                                                            MD5

                                                                                                                                            369bbc37cff290adb8963dc5e518b9b8

                                                                                                                                            SHA1

                                                                                                                                            de0ef569f7ef55032e4b18d3a03542cc2bbac191

                                                                                                                                            SHA256

                                                                                                                                            3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3

                                                                                                                                            SHA512

                                                                                                                                            4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeComRegisterShellARM64.exe

                                                                                                                                            Filesize

                                                                                                                                            179KB

                                                                                                                                            MD5

                                                                                                                                            7a160c6016922713345454265807f08d

                                                                                                                                            SHA1

                                                                                                                                            e36ee184edd449252eb2dfd3016d5b0d2edad3c6

                                                                                                                                            SHA256

                                                                                                                                            35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9

                                                                                                                                            SHA512

                                                                                                                                            c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeUpdate.exe

                                                                                                                                            Filesize

                                                                                                                                            201KB

                                                                                                                                            MD5

                                                                                                                                            4dc57ab56e37cd05e81f0d8aaafc5179

                                                                                                                                            SHA1

                                                                                                                                            494a90728d7680f979b0ad87f09b5b58f16d1cd5

                                                                                                                                            SHA256

                                                                                                                                            87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718

                                                                                                                                            SHA512

                                                                                                                                            320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

                                                                                                                                            Filesize

                                                                                                                                            212KB

                                                                                                                                            MD5

                                                                                                                                            60dba9b06b56e58f5aea1a4149c743d2

                                                                                                                                            SHA1

                                                                                                                                            a7e456acf64dd99ca30259cf45b88cf2515a69b3

                                                                                                                                            SHA256

                                                                                                                                            4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112

                                                                                                                                            SHA512

                                                                                                                                            e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\MicrosoftEdgeUpdateCore.exe

                                                                                                                                            Filesize

                                                                                                                                            257KB

                                                                                                                                            MD5

                                                                                                                                            c044dcfa4d518df8fc9d4a161d49cece

                                                                                                                                            SHA1

                                                                                                                                            91bd4e933b22c010454fd6d3e3b042ab6e8b2149

                                                                                                                                            SHA256

                                                                                                                                            9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2

                                                                                                                                            SHA512

                                                                                                                                            f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\NOTICE.TXT

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            6dd5bf0743f2366a0bdd37e302783bcd

                                                                                                                                            SHA1

                                                                                                                                            e5ff6e044c40c02b1fc78304804fe1f993fed2e6

                                                                                                                                            SHA256

                                                                                                                                            91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5

                                                                                                                                            SHA512

                                                                                                                                            f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdate.dll

                                                                                                                                            Filesize

                                                                                                                                            2.0MB

                                                                                                                                            MD5

                                                                                                                                            965b3af7886e7bf6584488658c050ca2

                                                                                                                                            SHA1

                                                                                                                                            72daabdde7cd500c483d0eeecb1bd19708f8e4a5

                                                                                                                                            SHA256

                                                                                                                                            d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19

                                                                                                                                            SHA512

                                                                                                                                            1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_af.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            567aec2d42d02675eb515bbd852be7db

                                                                                                                                            SHA1

                                                                                                                                            66079ae8ac619ff34e3ddb5fb0823b1790ba7b37

                                                                                                                                            SHA256

                                                                                                                                            a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c

                                                                                                                                            SHA512

                                                                                                                                            3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_am.dll

                                                                                                                                            Filesize

                                                                                                                                            24KB

                                                                                                                                            MD5

                                                                                                                                            f6c1324070b6c4e2a8f8921652bfbdfa

                                                                                                                                            SHA1

                                                                                                                                            988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf

                                                                                                                                            SHA256

                                                                                                                                            986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717

                                                                                                                                            SHA512

                                                                                                                                            63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_ar.dll

                                                                                                                                            Filesize

                                                                                                                                            26KB

                                                                                                                                            MD5

                                                                                                                                            570efe7aa117a1f98c7a682f8112cb6d

                                                                                                                                            SHA1

                                                                                                                                            536e7c49e24e9aa068a021a8f258e3e4e69fa64f

                                                                                                                                            SHA256

                                                                                                                                            e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01

                                                                                                                                            SHA512

                                                                                                                                            5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_as.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            a8d3210e34bf6f63a35590245c16bc1b

                                                                                                                                            SHA1

                                                                                                                                            f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693

                                                                                                                                            SHA256

                                                                                                                                            3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766

                                                                                                                                            SHA512

                                                                                                                                            6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_az.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            7937c407ebe21170daf0975779f1aa49

                                                                                                                                            SHA1

                                                                                                                                            4c2a40e76209abd2492dfaaf65ef24de72291346

                                                                                                                                            SHA256

                                                                                                                                            5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9

                                                                                                                                            SHA512

                                                                                                                                            8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_bg.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            8375b1b756b2a74a12def575351e6bbd

                                                                                                                                            SHA1

                                                                                                                                            802ec096425dc1cab723d4cf2fd1a868315d3727

                                                                                                                                            SHA256

                                                                                                                                            a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105

                                                                                                                                            SHA512

                                                                                                                                            aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_bn-IN.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            a94cf5e8b1708a43393263a33e739edd

                                                                                                                                            SHA1

                                                                                                                                            1068868bdc271a52aaae6f749028ed3170b09cce

                                                                                                                                            SHA256

                                                                                                                                            5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c

                                                                                                                                            SHA512

                                                                                                                                            920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_bn.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            7dc58c4e27eaf84ae9984cff2cc16235

                                                                                                                                            SHA1

                                                                                                                                            3f53499ddc487658932a8c2bcf562ba32afd3bda

                                                                                                                                            SHA256

                                                                                                                                            e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98

                                                                                                                                            SHA512

                                                                                                                                            bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_bs.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            e338dccaa43962697db9f67e0265a3fc

                                                                                                                                            SHA1

                                                                                                                                            4c6c327efc12d21c4299df7b97bf2c45840e0d83

                                                                                                                                            SHA256

                                                                                                                                            99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04

                                                                                                                                            SHA512

                                                                                                                                            e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            2929e8d496d95739f207b9f59b13f925

                                                                                                                                            SHA1

                                                                                                                                            7c1c574194d9e31ca91e2a21a5c671e5e95c734c

                                                                                                                                            SHA256

                                                                                                                                            2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df

                                                                                                                                            SHA512

                                                                                                                                            ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_ca.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            39551d8d284c108a17dc5f74a7084bb5

                                                                                                                                            SHA1

                                                                                                                                            6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884

                                                                                                                                            SHA256

                                                                                                                                            8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07

                                                                                                                                            SHA512

                                                                                                                                            6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_cs.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            16c84ad1222284f40968a851f541d6bb

                                                                                                                                            SHA1

                                                                                                                                            bc26d50e15ccaed6a5fbe801943117269b3b8e6b

                                                                                                                                            SHA256

                                                                                                                                            e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b

                                                                                                                                            SHA512

                                                                                                                                            d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_cy.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            34d991980016595b803d212dc356d765

                                                                                                                                            SHA1

                                                                                                                                            e3a35df6488c3463c2a7adf89029e1dd8308f816

                                                                                                                                            SHA256

                                                                                                                                            252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e

                                                                                                                                            SHA512

                                                                                                                                            8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_da.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            d34380d302b16eab40d5b63cfb4ed0fe

                                                                                                                                            SHA1

                                                                                                                                            1d3047119e353a55dc215666f2b7b69f0ede775b

                                                                                                                                            SHA256

                                                                                                                                            fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f

                                                                                                                                            SHA512

                                                                                                                                            45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_de.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            aab01f0d7bdc51b190f27ce58701c1da

                                                                                                                                            SHA1

                                                                                                                                            1a21aabab0875651efd974100a81cda52c462997

                                                                                                                                            SHA256

                                                                                                                                            061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c

                                                                                                                                            SHA512

                                                                                                                                            5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_el.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            ac275b6e825c3bd87d96b52eac36c0f6

                                                                                                                                            SHA1

                                                                                                                                            29e537d81f5d997285b62cd2efea088c3284d18f

                                                                                                                                            SHA256

                                                                                                                                            223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0

                                                                                                                                            SHA512

                                                                                                                                            bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_en-GB.dll

                                                                                                                                            Filesize

                                                                                                                                            27KB

                                                                                                                                            MD5

                                                                                                                                            d749e093f263244d276b6ffcf4ef4b42

                                                                                                                                            SHA1

                                                                                                                                            69f024c769632cdbb019943552bac5281d4cbe05

                                                                                                                                            SHA256

                                                                                                                                            fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e

                                                                                                                                            SHA512

                                                                                                                                            48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_en.dll

                                                                                                                                            Filesize

                                                                                                                                            27KB

                                                                                                                                            MD5

                                                                                                                                            4a1e3cf488e998ef4d22ac25ccc520a5

                                                                                                                                            SHA1

                                                                                                                                            dc568a6e3c9465474ef0d761581c733b3371b1cd

                                                                                                                                            SHA256

                                                                                                                                            9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011

                                                                                                                                            SHA512

                                                                                                                                            ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_es-419.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            28fefc59008ef0325682a0611f8dba70

                                                                                                                                            SHA1

                                                                                                                                            f528803c731c11d8d92c5660cb4125c26bb75265

                                                                                                                                            SHA256

                                                                                                                                            55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d

                                                                                                                                            SHA512

                                                                                                                                            2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_es.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            9db7f66f9dc417ebba021bc45af5d34b

                                                                                                                                            SHA1

                                                                                                                                            6815318b05019f521d65f6046cf340ad88e40971

                                                                                                                                            SHA256

                                                                                                                                            e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819

                                                                                                                                            SHA512

                                                                                                                                            943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_et.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            b78cba3088ecdc571412955742ea560b

                                                                                                                                            SHA1

                                                                                                                                            bc04cf9014cec5b9f240235b5ff0f29dbdb22926

                                                                                                                                            SHA256

                                                                                                                                            f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085

                                                                                                                                            SHA512

                                                                                                                                            04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_eu.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            a7e1f4f482522a647311735699bec186

                                                                                                                                            SHA1

                                                                                                                                            3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd

                                                                                                                                            SHA256

                                                                                                                                            e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4

                                                                                                                                            SHA512

                                                                                                                                            22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_fa.dll

                                                                                                                                            Filesize

                                                                                                                                            27KB

                                                                                                                                            MD5

                                                                                                                                            cbe3454843ce2f36201460e316af1404

                                                                                                                                            SHA1

                                                                                                                                            0883394c28cb60be8276cb690496318fcabea424

                                                                                                                                            SHA256

                                                                                                                                            c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59

                                                                                                                                            SHA512

                                                                                                                                            f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_fi.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            d45f2d476ed78fa3e30f16e11c1c61ea

                                                                                                                                            SHA1

                                                                                                                                            8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e

                                                                                                                                            SHA256

                                                                                                                                            acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2

                                                                                                                                            SHA512

                                                                                                                                            2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_fil.dll

                                                                                                                                            Filesize

                                                                                                                                            29KB

                                                                                                                                            MD5

                                                                                                                                            7c66526dc65de144f3444556c3dba7b8

                                                                                                                                            SHA1

                                                                                                                                            6721a1f45ac779e82eecc9a584bcf4bcee365940

                                                                                                                                            SHA256

                                                                                                                                            e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d

                                                                                                                                            SHA512

                                                                                                                                            dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_fr-CA.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            b534e068001e8729faf212ad3c0da16c

                                                                                                                                            SHA1

                                                                                                                                            999fa33c5ea856d305cc359c18ea8e994a83f7a9

                                                                                                                                            SHA256

                                                                                                                                            445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511

                                                                                                                                            SHA512

                                                                                                                                            e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_fr.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            64c47a66830992f0bdfd05036a290498

                                                                                                                                            SHA1

                                                                                                                                            88b1b8faa511ee9f4a0e944a0289db48a8680640

                                                                                                                                            SHA256

                                                                                                                                            a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961

                                                                                                                                            SHA512

                                                                                                                                            426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_ga.dll

                                                                                                                                            Filesize

                                                                                                                                            28KB

                                                                                                                                            MD5

                                                                                                                                            3b8a5301c4cf21b439953c97bd3c441c

                                                                                                                                            SHA1

                                                                                                                                            8a7b48bb3d75279de5f5eb88b5a83437c9a2014a

                                                                                                                                            SHA256

                                                                                                                                            abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0

                                                                                                                                            SHA512

                                                                                                                                            068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

                                                                                                                                          • C:\Program Files (x86)\Microsoft\Temp\EUE5C2.tmp\msedgeupdateres_gd.dll

                                                                                                                                            Filesize

                                                                                                                                            30KB

                                                                                                                                            MD5

                                                                                                                                            c90f33303c5bd706776e90c12aefabee

                                                                                                                                            SHA1

                                                                                                                                            1965550fe34b68ea37a24c8708eef1a0d561fb11

                                                                                                                                            SHA256

                                                                                                                                            e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c

                                                                                                                                            SHA512

                                                                                                                                            b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

                                                                                                                                          • C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

                                                                                                                                            Filesize

                                                                                                                                            7.1MB

                                                                                                                                            MD5

                                                                                                                                            f7f075d6cca390dbb3195330dced1bfc

                                                                                                                                            SHA1

                                                                                                                                            2a6624ae08c077034b3b41dca1376287f7e0cb43

                                                                                                                                            SHA256

                                                                                                                                            97c03bfa6193f0d5f897eb78b1867c17790b085fe610d0e1130e9a80e36d5577

                                                                                                                                            SHA512

                                                                                                                                            bbb4389ef71eda38ca80a999b5a6616484547b72974b906a7b26939eb5b5d911dc68d046a371a3791e8b2c7557b987e94a52fdc9cd7cc9e6996e3ca5371004f6

                                                                                                                                          • C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

                                                                                                                                            Filesize

                                                                                                                                            1.5MB

                                                                                                                                            MD5

                                                                                                                                            610b1b60dc8729bad759c92f82ee2804

                                                                                                                                            SHA1

                                                                                                                                            9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552

                                                                                                                                            SHA256

                                                                                                                                            921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08

                                                                                                                                            SHA512

                                                                                                                                            0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

                                                                                                                                          • C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

                                                                                                                                            Filesize

                                                                                                                                            17KB

                                                                                                                                            MD5

                                                                                                                                            6393f6d6f62ce141323f673f49b2b43a

                                                                                                                                            SHA1

                                                                                                                                            6b8ed821f68e4b0c662f95e3478e440b630aa831

                                                                                                                                            SHA256

                                                                                                                                            d6cdec1dd3e16a243e7db2aa6289d56cf31e77e8f3accf67c7aec1fd55d6f548

                                                                                                                                            SHA512

                                                                                                                                            70a62199104a44d523696301740588556b46ae9c6688f33ae6727cee84807b6f30e5b9a9d1eb56c1c093266b0210034720ef03600031153ad08d5bf17e911568

                                                                                                                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                            MD5

                                                                                                                                            b5ad5caaaee00cb8cf445427975ae66c

                                                                                                                                            SHA1

                                                                                                                                            dcde6527290a326e048f9c3a85280d3fa71e1e22

                                                                                                                                            SHA256

                                                                                                                                            b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                                                                                                                                            SHA512

                                                                                                                                            92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                                                                                                                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                                                                                                                            Filesize

                                                                                                                                            4B

                                                                                                                                            MD5

                                                                                                                                            f49655f856acb8884cc0ace29216f511

                                                                                                                                            SHA1

                                                                                                                                            cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                                                                                                                                            SHA256

                                                                                                                                            7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                                                                                                                                            SHA512

                                                                                                                                            599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                                                                                                                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                                                                                                                                            Filesize

                                                                                                                                            1008B

                                                                                                                                            MD5

                                                                                                                                            d222b77a61527f2c177b0869e7babc24

                                                                                                                                            SHA1

                                                                                                                                            3f23acb984307a4aeba41ebbb70439c97ad1f268

                                                                                                                                            SHA256

                                                                                                                                            80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                                                                                                                                            SHA512

                                                                                                                                            d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                                                                                                                            Filesize

                                                                                                                                            649B

                                                                                                                                            MD5

                                                                                                                                            615b2e7df9738c0711dd43ec511b196c

                                                                                                                                            SHA1

                                                                                                                                            751f1a9b3ce750f2d74430c5cdbb88165d6366ab

                                                                                                                                            SHA256

                                                                                                                                            63a6809dcb9bbdf3493d2e7676b7535f030f8ca649fb1896bd12b98abbffb1f4

                                                                                                                                            SHA512

                                                                                                                                            980b396807cfc4474849320814fb94699daecf6b0e0d339590083c4f957091acc82d85177e0aa6675c78011f59bcf3f3261b78620c47b8c8db07bbfeb9b2df5f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

                                                                                                                                            Filesize

                                                                                                                                            39KB

                                                                                                                                            MD5

                                                                                                                                            e1f6e032096b2924e561c3928b9dc73d

                                                                                                                                            SHA1

                                                                                                                                            f33a3bb1b04f04ed1b93b13d21b6b3ce529690ad

                                                                                                                                            SHA256

                                                                                                                                            fa802b853572d8a40ee939940d0cd9562ea8f5954c0522b0777e01fcb546c3c8

                                                                                                                                            SHA512

                                                                                                                                            b13f6e1f984d28c5f4cfc4ae2298b321c314892cab1e5ccd6f1f61ec98d8c1a39669078c88ba541c91648963abc6e16e0a1cdb4e9449b4be16927e9bad8d0f37

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

                                                                                                                                            Filesize

                                                                                                                                            42KB

                                                                                                                                            MD5

                                                                                                                                            cc7ad65e0558327d8fbe8ade40ab94e8

                                                                                                                                            SHA1

                                                                                                                                            6c153e9bf971f196db25cb2cb3b62f77f0a1299a

                                                                                                                                            SHA256

                                                                                                                                            956e1fd407995ff1ecca3bf42ca0d01086edc7eb6a965e1d9d4a48f197a8bd30

                                                                                                                                            SHA512

                                                                                                                                            0af63a7bb1151ef7564472b90ddd766857e3fd78973195817aa751d97093558688733876114ea7341063c7f1bc01f90aba1016980ce2c009a0cc399f40614377

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

                                                                                                                                            Filesize

                                                                                                                                            41KB

                                                                                                                                            MD5

                                                                                                                                            60df02cbc9b6a531c2d3cf32025a4dc8

                                                                                                                                            SHA1

                                                                                                                                            71ce31d6e0f59f98855a01b3eb9a37a86352189f

                                                                                                                                            SHA256

                                                                                                                                            2d73eefd868f115745117f76888a9b0124453918522046796a55c3621ad2c15d

                                                                                                                                            SHA512

                                                                                                                                            cfc2d4bc147bc757054c07a7e347091922d4ff9b7a0f856d0a3c278f5a98fac1a539d05ea5c375868b372f006a530d14558ac7027723f83f3b22087bd12992dd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

                                                                                                                                            Filesize

                                                                                                                                            40KB

                                                                                                                                            MD5

                                                                                                                                            f1cad4800853bba09a023250de102801

                                                                                                                                            SHA1

                                                                                                                                            76e1a6ae10ac4db2a3e4e8bf6b7edd692c4537f6

                                                                                                                                            SHA256

                                                                                                                                            e73ceb9052ea848498daacd8a9fff37846cce47324b38df12e9dcf0bf25d2e3b

                                                                                                                                            SHA512

                                                                                                                                            4e869ccea434e71f03ab513b3aa6212da3326cb9625c467b782df48367cbf5c69fb8a073d68180877cfde2510dbe74670046b897125b55f013fe595bb7d3595f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

                                                                                                                                            Filesize

                                                                                                                                            19KB

                                                                                                                                            MD5

                                                                                                                                            1c0855f1be21f499eb7a4027e5dd1d86

                                                                                                                                            SHA1

                                                                                                                                            e6ed4d7fe3cd0a8ab318139e185bb3dd8230bbe1

                                                                                                                                            SHA256

                                                                                                                                            22e535eaaf874306552b8ec2683073504976ab14ecbc9939fca4ac53e60066c7

                                                                                                                                            SHA512

                                                                                                                                            e8307c98600bf5817163ee91895cae89bff946c2c151645969f469262d90385e5556f3b6da0c24dfdc4b64a07e84e0a9418b259afd821b142c6bd8f95546d685

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

                                                                                                                                            Filesize

                                                                                                                                            40KB

                                                                                                                                            MD5

                                                                                                                                            31d4e713ead43eb25da2aea42b6e36e9

                                                                                                                                            SHA1

                                                                                                                                            f30ca6f9b4b5f3bbbf27bce20d88dc155f924057

                                                                                                                                            SHA256

                                                                                                                                            410f12a76d6da2005dedb821a310d072c07c988f736c20a4b3bfe7791c3530b6

                                                                                                                                            SHA512

                                                                                                                                            3700c090ba16c21f155c49e49399471cb019beb9a5f7bc7f0da9b5a975009d5499bccfd4da7887ecb8a123d7c3b1e0d1800b9412233e245e09aa7cd318629916

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

                                                                                                                                            Filesize

                                                                                                                                            132KB

                                                                                                                                            MD5

                                                                                                                                            0eb85925bd5a3e685d5cdfc482fad198

                                                                                                                                            SHA1

                                                                                                                                            c00b9cba0d988f4a66b71166f55f1924265e6425

                                                                                                                                            SHA256

                                                                                                                                            b8d6db24cd3d57746bfd5965eec1f25c4732f0db83104134832bf1618210f658

                                                                                                                                            SHA512

                                                                                                                                            633b18af25ff914c7eb346eae4b43f4cca3f41487b114ce47bf053c72aa4e598e7f59f4ac8614cdba07593cf43027cbe32142b5bf28c0e7abfe7c390afdfd6e7

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

                                                                                                                                            Filesize

                                                                                                                                            63KB

                                                                                                                                            MD5

                                                                                                                                            78413c0d5e05d6c36720ecc0c3013cbc

                                                                                                                                            SHA1

                                                                                                                                            4ea7f7a04d11a77a9aff562788ac57374607c329

                                                                                                                                            SHA256

                                                                                                                                            4238a86271d25bf5f8f4ae9e2e911200e54618164a67e1b624ee497563af74ee

                                                                                                                                            SHA512

                                                                                                                                            0835b56d178ca0b3fe555b43e3e265c2f847da9fbb6167b52385085a1bde981000153f65f2026d45352b783d155f3d3edce5ab9576b9333e1c31d8f7afa4bcde

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024

                                                                                                                                            Filesize

                                                                                                                                            43KB

                                                                                                                                            MD5

                                                                                                                                            319095e8b40952b12b266eb47a2b2c40

                                                                                                                                            SHA1

                                                                                                                                            1ac8f74ec55f61066a241e5e4e7fb063ff0239e4

                                                                                                                                            SHA256

                                                                                                                                            a8de00bf5dc0b0f5c64627adcb24e8a39c938aad90a37e7108dc8bd2c773ab24

                                                                                                                                            SHA512

                                                                                                                                            20c72b91e7ff900a4ddcd93ff306b32778dbbf065bb67b3e4b4141a144612e4abc1f30936fa38362db484155a0fd9a87e5e5cb2ab0fbbba5823bbb40d397da1c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

                                                                                                                                            Filesize

                                                                                                                                            54KB

                                                                                                                                            MD5

                                                                                                                                            820da0e97c5b725313877863020d4e3b

                                                                                                                                            SHA1

                                                                                                                                            6631e0515ce53d76048ed4ca7bb9386a57224bfd

                                                                                                                                            SHA256

                                                                                                                                            79896ac91c4d46d2095c365ae44e687516c867580a860b7b00568b04b6d34ebb

                                                                                                                                            SHA512

                                                                                                                                            b922ef4acf1197f0a001c7782ebb9b22cdb60cbe74b9486b3397f7ef9ce49036bc88d40bb3df89dc19ffda90f30473ec52f0cf2df792a6d130b577c6fa91d9cd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

                                                                                                                                            Filesize

                                                                                                                                            435KB

                                                                                                                                            MD5

                                                                                                                                            782b7fc18a24ee997efd9a7f02fa4bf9

                                                                                                                                            SHA1

                                                                                                                                            db1f15bf56aa30ec79bb6a9d2632fe2a12de099b

                                                                                                                                            SHA256

                                                                                                                                            c45388c0937dde58151ba6f3d2225751b8b89ac001be1ef1f40134c61d391b8e

                                                                                                                                            SHA512

                                                                                                                                            c08790580afe4c89fd3e6cf9dbb4b26548b4a686b1e9bcc3a9dbc6fdcad49e84a0a5ec2ea7f3935308ac059af040af3879e29f3c0e2150d7687bd02fe5f4daf8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00010b

                                                                                                                                            Filesize

                                                                                                                                            215KB

                                                                                                                                            MD5

                                                                                                                                            2be38925751dc3580e84c3af3a87f98d

                                                                                                                                            SHA1

                                                                                                                                            8a390d24e6588bef5da1d3db713784c11ca58921

                                                                                                                                            SHA256

                                                                                                                                            1412046f2516b688d644ff26b6c7ef2275b6c8f132eb809bd32e118208a4ec1b

                                                                                                                                            SHA512

                                                                                                                                            1341ffc84f16c1247eb0e9baacd26a70c6b9ee904bc2861e55b092263613c0f09072efd174b3e649a347ef3192ae92d7807cc4f5782f8fd07389703d75c4c4e2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            fbca1720a58a9c55bbb81232f67589a9

                                                                                                                                            SHA1

                                                                                                                                            a667ffb48172acc9ecfb5958c9c7459af721910a

                                                                                                                                            SHA256

                                                                                                                                            845b6ed4918812e7ad5b6f881e524b9fa7fb7c2903d07626b7cca81efb28dda4

                                                                                                                                            SHA512

                                                                                                                                            76c7ab671caaf937db381e5031f4e25686747b5fff82361097b50134ba571f6dcc1db24e551e41cc78e0689c0483aa9f877e158624300a791c5b5f44038b38f8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            03033414a79f1ddbb6e456372a744aab

                                                                                                                                            SHA1

                                                                                                                                            37455f52946e4df17d481a8de3a8497176c4bc82

                                                                                                                                            SHA256

                                                                                                                                            cbf3d87d8869a65cc7d2dfe6672ec778438881a73bc9d784dca5eed8126a5500

                                                                                                                                            SHA512

                                                                                                                                            ce88f8da99ab854b6940e46b5f3d1ef01b0308188dc36fdf71e9d40d4fd08242c44d59e25325ba4fc55c98cd6e57d959b64b96291eaf8ff4234e2ab1fd4fed2e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            612f6b27e698e25d49788af1572bcbce

                                                                                                                                            SHA1

                                                                                                                                            40785efd89951428c33f813cc048af989bd37f3e

                                                                                                                                            SHA256

                                                                                                                                            b0f907ab47d1f9faeb89284c12c32c016aafada079cf39fb5f27194704e7ed6b

                                                                                                                                            SHA512

                                                                                                                                            2d6d3a8931e096c48bf3bdb29fa80c2f682e668886caee3c4ae5a3f8a815a43e47ea367ba64ce068c198a31038c26fa94d71e3c581d10a9e1cacecff584ea843

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            3KB

                                                                                                                                            MD5

                                                                                                                                            20b9b0b667fa9d4010494bfeeb9894c8

                                                                                                                                            SHA1

                                                                                                                                            fc5a52fbcc5c532c2fd194b8bf0f6157907b97ca

                                                                                                                                            SHA256

                                                                                                                                            9a48b87ef79b6f07c773be5bcbdaf7d0425843c65490607d8a70bfecb8c123f4

                                                                                                                                            SHA512

                                                                                                                                            b385c95c629d8a04b8f9c02d1acd18204f1ff769faa044904484b14332ee2f56530cbaba00dcecb4f66bdc35c6741b6d75e4e1c94cbe2675cff4cce3e5924561

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

                                                                                                                                            Filesize

                                                                                                                                            264KB

                                                                                                                                            MD5

                                                                                                                                            2f32d5cbfa5993737c4b079580a903e3

                                                                                                                                            SHA1

                                                                                                                                            58fdc6adae4ee9b2c212365607238acd9ce29301

                                                                                                                                            SHA256

                                                                                                                                            2c37ce8a8f71236d2e1e548d36a92e4a218c34f0f22ef10e2138de39d887ea55

                                                                                                                                            SHA512

                                                                                                                                            280f63ed022d92a2a263840bc37de01ea85345b87acf6962dffd6e9ebae200002b98217c49b3015b05cf1e3c607405b8fbeeee32f80f54d9d4c8ae5449e29023

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                                                                                                                                            Filesize

                                                                                                                                            387B

                                                                                                                                            MD5

                                                                                                                                            2adb1ab9d5b6bae01884973fddbea416

                                                                                                                                            SHA1

                                                                                                                                            6cd9d9de46f610f7f617b356c41c2bd8cc7302a3

                                                                                                                                            SHA256

                                                                                                                                            f1ad587ad83989ab718166a9cd3cae5db760ce13227b81417378c0008c140694

                                                                                                                                            SHA512

                                                                                                                                            5230ca29247ba1d77f00711f80d7beb2309df2aee73233261d332df85efc42b00092fe76bdce4f3e2d60d40b4ce6e950457f37107541945da001f516330909e3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                                                                                                                                            Filesize

                                                                                                                                            387B

                                                                                                                                            MD5

                                                                                                                                            c3c61fa378ef58428b89beeb13776479

                                                                                                                                            SHA1

                                                                                                                                            a1e3b78330c59b3745c3091c97e9eb46f1190eed

                                                                                                                                            SHA256

                                                                                                                                            54189a8762d432c57b0f4b821176d3ae8f3b667f5c523e7a37ff341e81c50278

                                                                                                                                            SHA512

                                                                                                                                            4d59d7354d0d2f1cbe8cda3101c52b4f4e588f6f5aa0f0219b69bb69f52eb6610b0eb29142c61683c61b8ba6ac407a7a11d793a303d6b678e37b0c8cefe8306b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe641fcd.TMP

                                                                                                                                            Filesize

                                                                                                                                            511B

                                                                                                                                            MD5

                                                                                                                                            a4660ebc615e3883e90168f161665747

                                                                                                                                            SHA1

                                                                                                                                            8adaca263f29eae60950f18417f1cdb774d50f38

                                                                                                                                            SHA256

                                                                                                                                            5c1331fe43710fe0f6bbb495c1d97ab5184db4e06fb3478d162e383066082646

                                                                                                                                            SHA512

                                                                                                                                            a46d0db4d5ead97898b071627c6899355d71639851f55a0e7865bb92be2dcd576c0527e7830f4899192b859b122888e9c547c6903ab91051bc853f17a115ee54

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

                                                                                                                                            Filesize

                                                                                                                                            23B

                                                                                                                                            MD5

                                                                                                                                            3fd11ff447c1ee23538dc4d9724427a3

                                                                                                                                            SHA1

                                                                                                                                            1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                                                                                                                            SHA256

                                                                                                                                            720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                                                                                                                            SHA512

                                                                                                                                            10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            3KB

                                                                                                                                            MD5

                                                                                                                                            215a6fbbcda2ce8db0be987b3151c547

                                                                                                                                            SHA1

                                                                                                                                            7de271d94f97b0dec3e4b1272e9b955a138eec3b

                                                                                                                                            SHA256

                                                                                                                                            4af03f4663b43c21a0e4995884ee42db60f46096e733420864f95955cfe9da2a

                                                                                                                                            SHA512

                                                                                                                                            76d1877253b0e3281160166af8372d4c528584665f10f434e7a1d9aea10f3d088fa3aba130d33f63761a01bce270d3fdbccdc6fd0f127ac28d6f432e57b5c93d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            3KB

                                                                                                                                            MD5

                                                                                                                                            ba7e4ba1cc2a29cac281a9a05309e5bb

                                                                                                                                            SHA1

                                                                                                                                            efd947ee03d88fc7a275c257a43833bd5bf24828

                                                                                                                                            SHA256

                                                                                                                                            b59b37ad65091c5ff6a3fa6e07b2dd52c71acee6b3a53e00a368d657647b9638

                                                                                                                                            SHA512

                                                                                                                                            7fc3fe73e9cbb5304e1bb7f43af3ba34fe47c47fe405d10ea6e93d5e1b4e05e7f7859fcfe9deef3a0ba9e9d712cf5a3703b9689cdb3861e866af02d360c35a33

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            7a9242c0f9cc761f8251d93986af3479

                                                                                                                                            SHA1

                                                                                                                                            239861a01ab33f096176bd80582a813198bf1f71

                                                                                                                                            SHA256

                                                                                                                                            adb9fd8b3c67a3b80859d22feb3ed075ce9121ead284db8f183ad47ffc30e560

                                                                                                                                            SHA512

                                                                                                                                            cef505ba9e556c98de6a4de6df35874166e138baaaf03af0f08f4ef84918029ea349d31b7453a12f99c0e36d41341850df72ded498daeef4d00cfe4b678b7ad3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            120febc798f7d1bc40a168a79cb721ab

                                                                                                                                            SHA1

                                                                                                                                            da9dbc0fd3b934cf63f2dfb06552b0b6552f162c

                                                                                                                                            SHA256

                                                                                                                                            ccf2eea76dd1ee311a7c2b1fb7ff9b55196f99ef5eb8fbc2b6810ebacceaa979

                                                                                                                                            SHA512

                                                                                                                                            e184e0b0d53cd965d2b29eb1a1c01c7a246690cb70b63dfb65261e82ad7ad5cadc59eaab0776b80d465ee34d150d8b673003f52c06db785a7e1c9a7e97574754

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                                                                                                            Filesize

                                                                                                                                            2B

                                                                                                                                            MD5

                                                                                                                                            d751713988987e9331980363e24189ce

                                                                                                                                            SHA1

                                                                                                                                            97d170e1550eee4afc0af065b78cda302a97674c

                                                                                                                                            SHA256

                                                                                                                                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                                                                                            SHA512

                                                                                                                                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            83731280b35f8aef8333dd4fbbdb37cd

                                                                                                                                            SHA1

                                                                                                                                            a12c484daba7be6a76945ea33d0b3b048a957ded

                                                                                                                                            SHA256

                                                                                                                                            81c7a92ddf5439ce31bc847db52eb7967754f18d45bbb75764390d24099a5f77

                                                                                                                                            SHA512

                                                                                                                                            573cb793f1f284af2ebc0872ac7ef9f0c6f8ae8922523906ed0a6c023b8795acec141c94625e9280913799792108b4fdd71a95e99cdd393f8a1e4f87891585fd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            3d4c4148e0cfa2e224065bc7417b1679

                                                                                                                                            SHA1

                                                                                                                                            4b9358f92bc1b754643211a321f29bd850c18676

                                                                                                                                            SHA256

                                                                                                                                            3477ffc0ecc11cc42b05e22bc499c242f7ceff5260a23a485da01ce632823ae6

                                                                                                                                            SHA512

                                                                                                                                            5f471aae2dad5e359373147ad3965e03b5d3672afc1d2923d7c47088cc712b974be06ee95687887e058a8076a98b79c07bd1f7f3d961a8e396f7da1d48cfe583

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            f97100e97befe1367243247b615f344e

                                                                                                                                            SHA1

                                                                                                                                            db943630df0c058b61bfe148dcd0d63985c3533e

                                                                                                                                            SHA256

                                                                                                                                            4ecdd46414b8ef6b7a06b9781e6361db39fd72363accbf4cbd8be7a4100d45c7

                                                                                                                                            SHA512

                                                                                                                                            f2c0d8bbaafde9abeaba433175b81584de9b402ccb4dc89f1f1a1a1b74bd1b3817111d6dc3d2380eb4abb7619a9bf5040c05e260bac5129e068837709563f79c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            9175cf07a58423dbd792b05906127ac4

                                                                                                                                            SHA1

                                                                                                                                            b1516e0d038fcb4db34843ae5e627d3aaa31d3ee

                                                                                                                                            SHA256

                                                                                                                                            1fdfec0b4c1233bb2fa3c6273188724ca51bb6da1ef7351d7a2a620064add812

                                                                                                                                            SHA512

                                                                                                                                            4ab06d2f53468fb4b666e0ad7aa49c40f87a8e2c93848d9eac2464dd1642078f7010280315dbfbc6c6b85de39af685e339ca12d1f4424065eb4bf28d14b15ceb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            2597f8d2babc989f7b639d54fe8cf0d9

                                                                                                                                            SHA1

                                                                                                                                            5864c84dc57e59b1dbd68b7113c31a5648f1c1c0

                                                                                                                                            SHA256

                                                                                                                                            8d20c84e6f2d35aefd2b63f9229ffc2c9f3a3afbef8b70c91915f1b2d538f827

                                                                                                                                            SHA512

                                                                                                                                            bf888e7578ef7cf717da7d70b07465a8447bfb13cbbc02f3353ab1035979f7c61d7c9c66020e7f6624e520ac9c3510b4b97b255db123505edbdd7ead9283bcf5

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            27f385b4e180ec53787e01e929b8aa70

                                                                                                                                            SHA1

                                                                                                                                            91e65be489e1815b1b31bf020f969ab4209b3e8e

                                                                                                                                            SHA256

                                                                                                                                            4566184c363d84bca3ff1612cecb20f62cfaa536711b49a6bbd12191da06da64

                                                                                                                                            SHA512

                                                                                                                                            a7d045eb34ae68f4b44fe5b7714e38ff12c714f10b35f73aa76de3f95b3ac2758561f063ec438c320444d600409d2b10f41acc65fdb308a72e826bf03be719d3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            89cc6bb0c27a689901c7a5ba7775ccf3

                                                                                                                                            SHA1

                                                                                                                                            e019ebd60572f29325c51276cec383a0a13abe10

                                                                                                                                            SHA256

                                                                                                                                            66b88e78b11b31eedab966b495b38e26ec64f15f72f2ee0554571372045d32e5

                                                                                                                                            SHA512

                                                                                                                                            4056a1ac9ea400a12ce94a84227cfdc84955aedff243abef32a2d0db2a0786e4bd95adea36867dedea4bb89d20cb6f365846f5b265b49c71891ef93acf69eafb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            e49c7b96c1dc68e4d4716d2c72f2a172

                                                                                                                                            SHA1

                                                                                                                                            8a1eb2f2adbc0dde92cd45475af31ed6206cdba0

                                                                                                                                            SHA256

                                                                                                                                            eb4d6e46bd92f58f69fe91a2ef7e1bfc0b7aee1258e5d9ad955ed8fa7a653aa7

                                                                                                                                            SHA512

                                                                                                                                            416c207817ca0bf08c68ab476f2119e2bd5728a3aec8891e20c282a7a840e10b0f1edef857323ce5007c26d6e7831a965e930a1b405966cf812c1e9014a4eb15

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            06fc77b8dcdc7fbd01f04325dc6d7908

                                                                                                                                            SHA1

                                                                                                                                            edb3cf1a58eabf2072e40db532751eeebce35af4

                                                                                                                                            SHA256

                                                                                                                                            a2422a1c49f5bed48494787975d673a5a27d4db02bd09be80e4e6c063cee8632

                                                                                                                                            SHA512

                                                                                                                                            529508ce9e82723f3c5c213ffd31cd9e904ee50177f9130338ec150764de4402723d890258dd22ad6ff9283748026355d73c7b28f24bbfe6bd93908e87bd8922

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            89d83af2efa7378712f21ca04785b300

                                                                                                                                            SHA1

                                                                                                                                            d7527c71b7bffcaf4b1dd37cd12914843d8bbedd

                                                                                                                                            SHA256

                                                                                                                                            fde1559542144b97793d412d1fe4beee852712707a27672b586b12351fe9b1a6

                                                                                                                                            SHA512

                                                                                                                                            f49b0c9c5ba68a8194870742aa9b5c3899208a635c12415d96a9d2fab7cbb4a5c768c2cf23f6d3f729a2c44735f1ba97c5044a6a5431cf544ac48087a3b14497

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            9f0a9269b18989012f90c1ace6b71c85

                                                                                                                                            SHA1

                                                                                                                                            92d24cfb06d949f5cd0a83f834db3dd7fe0d87ea

                                                                                                                                            SHA256

                                                                                                                                            f5cca780dcab8c18bfc9348c54c0f5c3463fd0fa1601fdc7ce51f0acc4ef2a6f

                                                                                                                                            SHA512

                                                                                                                                            a6df529b4bc8863f74f7e15e5dda7f8add655f678919db184a2bcaca6052c3a90ecc34088410bc822cd22f9e16f28ba3ac2b28ffff4326e70416b2ae5f5d9293

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            a6798e2c0f11379cd804aff387c276e5

                                                                                                                                            SHA1

                                                                                                                                            6db0000b65ceb407c15777913d68b790530aba93

                                                                                                                                            SHA256

                                                                                                                                            5b3aa41f0bdfafb4bb034c016fce985dcfd59b635a67e85ad2bc0c2c7e10c23e

                                                                                                                                            SHA512

                                                                                                                                            e46225b40afd46716e3a295c02dbea3d32b4c3008c250c6309573c94a019d558327f095513d6e9f711a45a2357a75677c672ef5dd9c33a68b3ec9130c220ea09

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            ab14fb88f913a7b747ecfde190812b88

                                                                                                                                            SHA1

                                                                                                                                            7cf0cb10e7dd831a2f8960beb4ab63b42a50642e

                                                                                                                                            SHA256

                                                                                                                                            f71b8ce695b27fb9f59d7b7b2023ab3f672418391c7cf04e8f79b41abaca3e32

                                                                                                                                            SHA512

                                                                                                                                            bcf4ecaaa453492a0a6d5b517a7031b6711b1f05e602793016d4659b85f9650607873182094115c7ead36d7858a085377e78a3407e00ab5f7e20d499b79a85b3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            61a0b34d1c56ea41e558fa6984a212ba

                                                                                                                                            SHA1

                                                                                                                                            300fccf4053400201f31a888c58d2887f93a7759

                                                                                                                                            SHA256

                                                                                                                                            a7fc46396a1c9b80ecc3c81ecca613842381b97da228b65f92352c03a5aab74b

                                                                                                                                            SHA512

                                                                                                                                            d262bc8bf7bf5370fdfe8f62a75cce408bfc331ad38448bc11b20774b6254f25ee948919c14ae61c48de2cad7f8a2b1e193fe51be10d670f454f61d96ec99968

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            f93877560c0342bc710a6c0c3ddf6bc3

                                                                                                                                            SHA1

                                                                                                                                            41a61b533eebe1fcb7b3c24337a128bfea7da9d7

                                                                                                                                            SHA256

                                                                                                                                            19108efd49a1a721132502328bb217bced34097312f83a744a3e2d1b64c9049b

                                                                                                                                            SHA512

                                                                                                                                            e15cd7376f3687c89d802a365b0bfe2830f2a7e6d194d5228870e71e38d264d19449099c21e0becb09f1b0a3445860241a1a0e3c8cd453ed539f8a075a8579ee

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            27cb4ae78821ff5ae784421996243179

                                                                                                                                            SHA1

                                                                                                                                            cbf9f4e66ec1016373f08570379ef92c1c03e076

                                                                                                                                            SHA256

                                                                                                                                            aa8b557f6cc08ac3aa8b687425f6436fa1c16aa8c9340e1fb4df1a402e0e5cc0

                                                                                                                                            SHA512

                                                                                                                                            98827d17d9a7df8101b1a1ce16f594104aa41658fec3bf67a46e2deefa20465f98aca009d693e2dcf913535a1c9ec9c8446a46f2f710857429b3658a38ed999e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            ddbb3762e4e9932d8601cfb16c54f861

                                                                                                                                            SHA1

                                                                                                                                            de441182693da5a19b2869cb158d0cf785305874

                                                                                                                                            SHA256

                                                                                                                                            740c68b7739329c036568f5d18e46d439ffcda202d62d7bfe610fdfda5b23ca3

                                                                                                                                            SHA512

                                                                                                                                            589054f4805fcc8881e49d2551a26722c80e0f9631a226e75ad3e6f5bcf6945230a7e2bed0a4557c519c8ec06f22448f1d2e39ab9e5782101b1bd4e6601835f0

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            705ad8575b4bd09abd2f423d6281148b

                                                                                                                                            SHA1

                                                                                                                                            15fe978a1f2297833ffad86396d7deb833e7d729

                                                                                                                                            SHA256

                                                                                                                                            c413d88a6d0f51e385d916cded8f3a0d823e10c67f1fc33a0d1ae8eab783b19a

                                                                                                                                            SHA512

                                                                                                                                            4f92d7f7d9f9dd724b7b5c9135a8f37749f25c6742b73f7be652e4590e09e1e26fd174cc4bf3546ed6c9b29f56adf582d7374729a7dd71cc4ad92025aeee09ba

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            bdd06a51a828a40fb347e385f52236dd

                                                                                                                                            SHA1

                                                                                                                                            2988812eb3e5b91f2e49993ca5cbc4d61ad89e5c

                                                                                                                                            SHA256

                                                                                                                                            5c4bab226f99be8a4a3306ecd657bfa87de88e96e8f51c375361ccac23203bd2

                                                                                                                                            SHA512

                                                                                                                                            9584d617e0f6dc9afcf1e150289538bc39ccac63c0d75965046390d2bd72da9d068acb2723e796c86feb5990f66f510978efd97f25dcd9845c4f6be286563ae5

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            3KB

                                                                                                                                            MD5

                                                                                                                                            23ab9f9c6c88c7855ba6af5ea72d912f

                                                                                                                                            SHA1

                                                                                                                                            2eef6d4475ad17aa21804eee9ccb514a1a78b145

                                                                                                                                            SHA256

                                                                                                                                            e2b0d6c8c693e0518a085cee64399a530100932792aa27336eab168d6176af68

                                                                                                                                            SHA512

                                                                                                                                            c6ccc24fd8601b23bc8178f8ecade28ba9153b434af8a1f914f6c7aee69f67120f09309d970449280a3a5db15e8d23ed2cb1e12e2c6480624acde98c38b12bb3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            90511e5be3291c0450b0d6717cd507b4

                                                                                                                                            SHA1

                                                                                                                                            d55e624daa2df115d31cf87ecc33294840b19e25

                                                                                                                                            SHA256

                                                                                                                                            e9ab4cabcfa1efd6e1b140a25c2011dfebea35fa8bd3f19c435b3017c222756f

                                                                                                                                            SHA512

                                                                                                                                            cbbc1730050a3bcbd1b0ec690f5cbf7a9770d0f96bd936f3e8adcf83b5efdece59cae005cfc7c3d70e914c05d8e2616975505f3cf35d1a3549399385edb9d6c9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            b6c078ce8a1d2e09e58cfce72f544290

                                                                                                                                            SHA1

                                                                                                                                            d062c6f2757e29a0639b006e1633a8ffbfeb323b

                                                                                                                                            SHA256

                                                                                                                                            e3651ad0e8f3f961fe8119102dbdd5bdbc379531c98c31f3ae29b8a511ed8ab4

                                                                                                                                            SHA512

                                                                                                                                            382e26a3f040466c01c53e62823c3222a6e71a6f27b33d72f1b82bade515c458e83e5db76415b7ce82fc980122a95e2871de96e2e42d3dfde408bf137d231ba9

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            e2374ee0f8905c4cd8c3d4d82bfd95df

                                                                                                                                            SHA1

                                                                                                                                            11a90ccd545d50999ee1ca872d64225aed819ab1

                                                                                                                                            SHA256

                                                                                                                                            d389a3c4dad68d50bd6e873b89d360d6f5f9cec204eaec8e7fb0c1908dbed14b

                                                                                                                                            SHA512

                                                                                                                                            65c6ff1e2eb68252d2e23d612e4e84b466e960d53e6f21b92a11a5304ac2a2cf1158c21005b109c017d43e961362583a03147a741a95e293b0c675949c35e5ce

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            9f48ec4427904519897ed2909b0fbb32

                                                                                                                                            SHA1

                                                                                                                                            8953698d09b653d8b88c09ed618630e042276968

                                                                                                                                            SHA256

                                                                                                                                            03210ebc52f5e5446f08a72dea97214c1296dbbc0e221ae8d763edc170569532

                                                                                                                                            SHA512

                                                                                                                                            d134b8016d1c6db2f1fda59d286c041aa294df9507f7bfec57938ecf79ef6cf2c856c979583d7c15740313a045d21fde6f0803a4a911ebf9086456091b7dfb3f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            5fe6807eac10520502c5e4b07f1035c5

                                                                                                                                            SHA1

                                                                                                                                            d92c703cd8a3a7e552a75acf9301eab239a53e24

                                                                                                                                            SHA256

                                                                                                                                            605dd76f53ee5f6b672856937cb0834ea7d95607bdfaa723b296792293c16811

                                                                                                                                            SHA512

                                                                                                                                            74312995e6b51cfc75ecdcfa128f2acf190f0ed3e53df632076bc77246f812d00489e78f34d5a20b41aba865a35f84fcbe7ab48d461a78dbdeb7b863abcc7868

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            d52af055b60898861cb7d7eb691cee1c

                                                                                                                                            SHA1

                                                                                                                                            d887063dee8d4c015ea5b0c69962fbed31bb40db

                                                                                                                                            SHA256

                                                                                                                                            b1da3ec2fa69f3d62800a3e414e11b356668adf8878f8364bdd00d64be1f477f

                                                                                                                                            SHA512

                                                                                                                                            9b4183fc769b90009863a292cb2897c1cc3ced83ee35bf65f4bb525198dd5703f15ba8f3c870620966beab8675da807b1199a50d4d7cc665ecd1352773db2161

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            05a5ce180e558445f3cca331410e52bd

                                                                                                                                            SHA1

                                                                                                                                            55dfa8e8a6f11818177bcd1aae6f6d6ca410f562

                                                                                                                                            SHA256

                                                                                                                                            7a1ddfa62668bce24520d3942768b2f5d28058f78c6b25c752bdec1dc021e599

                                                                                                                                            SHA512

                                                                                                                                            3d9dad87b90ad980a466cdababc7afb5bcbf72100b86bc7c19ab53625e41a40b76532995f2b65aa7d594c3a47752792d8d18c9fee69cbe096cd6615e769e3a56

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            4781f18f0f24896d0838f3a74d7489c2

                                                                                                                                            SHA1

                                                                                                                                            e0f4911e6a3b851cd96a1a6b98d66f15ee40dcba

                                                                                                                                            SHA256

                                                                                                                                            5a2806932da950ec26161a9d68f74a7e7f0f6e3c222c6c4c0bcc8214f6d12c68

                                                                                                                                            SHA512

                                                                                                                                            f50529717d758e6959e695c9d8f0ec66d00a54ffc3299cc85286ba58d142140980c62b75eb44ea5a60a317fc5c3715d44d25ff7430ff3c0e7f86c3c5e8af46d4

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            957a2b092abd449c3795480071ed5bdf

                                                                                                                                            SHA1

                                                                                                                                            4631266d3c51c979fdc3e4c17cc72dd724ad7e7f

                                                                                                                                            SHA256

                                                                                                                                            8a1173c9fed5d1cb1b3b14af770d04b6c4c0daf9e6fd66d823ca317aaaff5789

                                                                                                                                            SHA512

                                                                                                                                            bc36f935ad057f9c0ef6df6f3fd7cb81062ce0e15162b570ab3f3ac53ba53e6da687a699ad74967db6365f0cdb8ff06f95b3687414474ce7eb57cee5171db29b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            1a1fb2ff4572a225a1cf923553157ba5

                                                                                                                                            SHA1

                                                                                                                                            d147f737e0179b527d13ee71c5c1fff2a383f291

                                                                                                                                            SHA256

                                                                                                                                            2ec43da9c6c3cbbd1173c59eab7ccd4bdd5de93e8fcdab5d13002e59bfa9c5cb

                                                                                                                                            SHA512

                                                                                                                                            cf118908e089bab6fd0c43eeccecb4ec6a4008904acdcd52e857342dfa626c2251d1b2a3d674d4955398618c40a8fd61e2021ae983f157cc26b9c49804ffdf4e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            22977f517d30e91815944d95958ea96b

                                                                                                                                            SHA1

                                                                                                                                            0aa3e261e9187e38a9a2c482fd17d691870366c7

                                                                                                                                            SHA256

                                                                                                                                            75e3bfa6f0f351e439aef152479a109a668379f22cec5a3504be9c9234b9c7e0

                                                                                                                                            SHA512

                                                                                                                                            9f3681eaf9daed3364f0e889d2f822b62b3685da7bb37fe13333e689ed8663cb777e6a37ee69747a02e9c0d5f12862ce4d373325ba75541203f42362d26ee0ea

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            c3cdadb2b941029da480def6adb69a69

                                                                                                                                            SHA1

                                                                                                                                            cf049eb41f5dc52f13af7398adab4bd16442906b

                                                                                                                                            SHA256

                                                                                                                                            65fe892dc754c249eea96248df8a70819ec41a748178b42d01ddefe5c9319893

                                                                                                                                            SHA512

                                                                                                                                            21f3f36dc5990489aff86ab87682989437e8a26fdcc1e0295b0e659628a5f9c2d8360a9780c20aed6b31fb7976705398532e4273bbd4f06029dcfe6cc9cd68c1

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            2e7510a573670aeb4684adca9f2872f6

                                                                                                                                            SHA1

                                                                                                                                            0906e6468f9444fd925cf45b83ad965e3f102d47

                                                                                                                                            SHA256

                                                                                                                                            e0843d16272c0a9f0537a32037f48ae94180b0b1ab837900036dfc59ff966ef6

                                                                                                                                            SHA512

                                                                                                                                            469d2a88a83d9fd7c1bbc71bd7a6660f0b22cae07deabd638576c8777ef0c67e47cc792380b268a5848366e11ae926a051a3fedf7dcac18d628c843a981e9b72

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            36fabbc3bb9bf0b8d4305d5000c2b33c

                                                                                                                                            SHA1

                                                                                                                                            b2ca22e9e7654dd8dbf87ea0b4bfae00e0812a8b

                                                                                                                                            SHA256

                                                                                                                                            8a9a77fd6d94b949cafcd39f8f792af778096d08fae6f94918900d312193ce68

                                                                                                                                            SHA512

                                                                                                                                            247aac276194a917c1e7e53b34d824bff237abc42f90f1bc46c5478c7646eadc5e840704d9062fce1b633242ea5d72b2a8bd66f36e59d60da248ef68f55f070b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            0fad7add6f1ccfa5e1940d38d301ccbb

                                                                                                                                            SHA1

                                                                                                                                            77585243838eecb0c7cacf5221d30a86fd99245f

                                                                                                                                            SHA256

                                                                                                                                            82dfe734ec00bcb2b6d8047d9574ed7c91d9ed35c0b26918f685e56cd9a22941

                                                                                                                                            SHA512

                                                                                                                                            62e52c1acce7eb06a4f0bc7a4e075b721680b83d592c6223a6df81614ca7214292ee2719d6a0335d892a0a6fad8b52fc531c3036edc8a298e6cf9055a875099d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            f05e0c08f5197d744cd31b63c8c839a8

                                                                                                                                            SHA1

                                                                                                                                            591987c64f2c887b14f16b01fe5c90e454f181ef

                                                                                                                                            SHA256

                                                                                                                                            9fb6567e5a85e74eb9c673e644ff48d029891f2c50e1754a3c222b70398df32b

                                                                                                                                            SHA512

                                                                                                                                            71cac89390344b1c1e7af2dcc26cc9c7f3150dae8ab157fa44077eaad43f1f86f6f8c89223713b55c3676b943220de6981e81f51f75493ab2e50b213bc066098

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            7fe9aa5733a60c529621855ea27286f1

                                                                                                                                            SHA1

                                                                                                                                            cc760e7e7eecc80e6493d38e7f92138782f01e9f

                                                                                                                                            SHA256

                                                                                                                                            5581f96b0bc590f27ffecaa7307227a33a013f385690ded46ed6b5232dc51aae

                                                                                                                                            SHA512

                                                                                                                                            ac1699336e582840a9f0e4563b8710db2548ef1d5ebee97758a0096be5d90284605ccb35dbdd2d5605e621e6e84e3cef54566d67872d104fb2c4e050e85cf643

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            bd0a9d6234d9df2bcb3f547c1096d26b

                                                                                                                                            SHA1

                                                                                                                                            b8553de3bff80f76669fbe526e811db54d4d80bf

                                                                                                                                            SHA256

                                                                                                                                            0ac002ea9f87097d5d41433721776351e31efa66b6dc85263a943f34063f0cb0

                                                                                                                                            SHA512

                                                                                                                                            7f140b44b24a9a57ded7ea7a4790cddc2becda257afcf281ea3befeed557d146c75e691b1a978b7a81e3ba9bcf4ef4bf909e04294df7676df5920344733b0544

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            118daee20b705d5437292836806dc617

                                                                                                                                            SHA1

                                                                                                                                            ece4b130a7113bdebbb7995e72b35f56a26dee93

                                                                                                                                            SHA256

                                                                                                                                            7d978297ee6f218bd7727e87a017386b00f95dd1f2ee803c4ddcce2920c348b8

                                                                                                                                            SHA512

                                                                                                                                            510050b5762b9a5928b1eb3258a327a300ad7970b09d8ac9e44aa385b402fc240da2f193ac57878747b5c8b88007cf073c8bf07b1f8a1767767123d65ab1e3eb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            77b73be88dae31415a1345aba365b884

                                                                                                                                            SHA1

                                                                                                                                            2582cc3180cb08451709894b6b907e4f861399bc

                                                                                                                                            SHA256

                                                                                                                                            a4a256468857ca802b7e622215e322c14e0cc3bd07a0666f5ff1a58216896e97

                                                                                                                                            SHA512

                                                                                                                                            12008e0b98ffd2af6ac3796cc91a10e993bfe68b3ffe042ec5b90345a5b4fd855f24e66f4ad25a6baf945e55ac27f75e29a0be0559a111adffc300528b79ff74

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            a7d7676e3649925e891104af6b51c8cf

                                                                                                                                            SHA1

                                                                                                                                            075fae2add21b5c4aa5431ea50a12f410ce819de

                                                                                                                                            SHA256

                                                                                                                                            df1bdb6071229be36d0f767cda9de4dec99d667ebe42226fcd80941817c6de98

                                                                                                                                            SHA512

                                                                                                                                            6d258c10312d4d6ef6e3352d94c523237112f3bea5969f1654caca69aa9f014d8d0d9ffd451711ceb844013f79652faf31d4a1c65afa64ac788598c1427315b6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            3e2e60af6060a338ae320555fc1ef793

                                                                                                                                            SHA1

                                                                                                                                            5c231d33d3b57657e55bb558c779158c5ddaec4e

                                                                                                                                            SHA256

                                                                                                                                            4ada15ddeb2c8942aeb5b5a889671a86c58247542b8c429e45f12c2115e89d83

                                                                                                                                            SHA512

                                                                                                                                            aa4e571cbf2df74aeee8e9b2459306ef5a5d02b8192de06bba13fda075df401209bf9af8906a6c82a2651e47c4f06f7ba384e9162ca38af26e4d8e0d932574fb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            372c8ff7da723abe1c7ffbef1ce5d6c3

                                                                                                                                            SHA1

                                                                                                                                            7321f56fd7864c622322e5b7d1f52348205cf7c2

                                                                                                                                            SHA256

                                                                                                                                            38a170af8ea267bc6d6ed0248188e78cf99f2bcb196c8e4eff30169b0520b0cd

                                                                                                                                            SHA512

                                                                                                                                            4a191fdb60056977106e2faf0b102f763d72f92076ad2ec1361e1417cb9ec52fd23ac441cfdb918e13c79bae6fd2dbff796e94893391b7e0edee176aaa0c89d3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            829d661d7342388528a9ebabcd62511e

                                                                                                                                            SHA1

                                                                                                                                            0fccc26b31d8d1bce8077e9150764d7ba8a29370

                                                                                                                                            SHA256

                                                                                                                                            b02d56dc26f3b85a5d4ecefe9d953f53d8578a6576e6b88af0126a84200764cd

                                                                                                                                            SHA512

                                                                                                                                            54b2faaaeb0a073e9a1d3bc14b164bf618359e5031a41bd67b7f098b9c375f49d592a0712d924689533ed1b1e1153ea1f2ef1f3781f5e31f720628d138de0a85

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            97022ba50af556871a815a134e6fbf3a

                                                                                                                                            SHA1

                                                                                                                                            7daf5765a8b906a9af994d2002063c95a88e32c4

                                                                                                                                            SHA256

                                                                                                                                            dae6ea92976941fd67131b47b2fdd0f8dc6a9b5001db9ceb3bb62c9441a89a7b

                                                                                                                                            SHA512

                                                                                                                                            17f5424032e5ae1105aeaa380abfe7b9c0dbd561505efc5a548d3bc13fe243b336479f189c2b6208e0c72857325f0d5c28ad5387effa70442ce090327f6b4f0a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            5e6919d4ad86c9f556d31ba3ad3eeafc

                                                                                                                                            SHA1

                                                                                                                                            b2491d3b95ed7e8d7574e6fe5632646968d5a28b

                                                                                                                                            SHA256

                                                                                                                                            a3eb4eca62d65b30964b57e3001b0c9cbf686469e84f55a94407ebb70ba8f3fe

                                                                                                                                            SHA512

                                                                                                                                            3311d1e300e50c8f70899848bf9d575694b75b32b5a74d54fba387abab813e786ddc01bbbe4497b17c2c5a0bd9e43a5a0a1d79b5ec20bd9d747a6994ec3f2e7e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            aee0331e6df097e8e0d9357d962775f6

                                                                                                                                            SHA1

                                                                                                                                            21b48c7ac8036b4fe09100b031bcd0a3d32b2e90

                                                                                                                                            SHA256

                                                                                                                                            b822ae6813826c3fc50e1f7bf4139ed3819803d7a37c561c402e756c980de5b3

                                                                                                                                            SHA512

                                                                                                                                            8a95f1871ccd752cfc54d7668b39d3f4b49936aaf604d9765e105f3d85fbe34e244168f52f890c7dbcd61798b61e65a82624c2373f50f894940c113536a972ee

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            7e972d4d03699bcc15d82fb6c1256825

                                                                                                                                            SHA1

                                                                                                                                            6134c261b7004c06313b13a4d911f402b4a094da

                                                                                                                                            SHA256

                                                                                                                                            98ed9edf36436feada76b94394975d0f742ed5e97a217e5a6665c8bd23ae4941

                                                                                                                                            SHA512

                                                                                                                                            d50baedd8b60487b3db71b209408034eff50a21fdee64a4b2cf236da8733f436c1fd295dec08c9a256cb983f2dab4fafe9df421738c239c300ec04dac9b1267a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            9KB

                                                                                                                                            MD5

                                                                                                                                            708a24b013d7eee0c711bff08d4ca4cb

                                                                                                                                            SHA1

                                                                                                                                            efebb178feb0fb9e3081daf9daa065a6d3ac777b

                                                                                                                                            SHA256

                                                                                                                                            589850d15e7b572d501564b2e2d2a877bd14577bf34f7ed20756a0cc2661349c

                                                                                                                                            SHA512

                                                                                                                                            aea8376624be7d22cf7c873b612809697e54b70ed5df94a3bd0b9e525da5e69f6cb6b796e1a52e300f2764ab908496948a30c8db0789b971aaa23ed7aec057b3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                                                                                                                                            Filesize

                                                                                                                                            15KB

                                                                                                                                            MD5

                                                                                                                                            a839ddd98fe33a18c491641175fb51b6

                                                                                                                                            SHA1

                                                                                                                                            663175158c1dcc8115f68d053f7d20d9b74bb8ba

                                                                                                                                            SHA256

                                                                                                                                            2138876a439c1e7f24230640bd62a6aa9b6ac4631b4ba987b042af89ff899adb

                                                                                                                                            SHA512

                                                                                                                                            3d87408d2bbc711f227c67ab8458f7a5358adda300dd25bf9d8ae5092c3b954d71732b458abe1cdff3bc9f206d854658366a0a10b355429bc7f48fc7dfba1501

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            231KB

                                                                                                                                            MD5

                                                                                                                                            f6973d25da7fb7df373ba0f941baef61

                                                                                                                                            SHA1

                                                                                                                                            2f3acbc918f6d878d4d55be047bb6becbbec9fe0

                                                                                                                                            SHA256

                                                                                                                                            0e64544cb0d96fc02cd146c9ffb103817ee9fe8993d12106a700edb1ce271e2b

                                                                                                                                            SHA512

                                                                                                                                            8eb217567cafe82d5d350ca4e0d010def62fc8fa3cc996c9ed0158e577263f4274efbe6768510625aa317d28fe2d13be0b62f2958230e47e13861598fd2654ec

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            231KB

                                                                                                                                            MD5

                                                                                                                                            3677f7d5ebcb3d188e557e8721f90548

                                                                                                                                            SHA1

                                                                                                                                            2d91b9cd28073968842afe27116a6451f0c397f9

                                                                                                                                            SHA256

                                                                                                                                            5ea1f0ac376ebd5911dba9b777fd4e779961f7f9f261fb78502f8373278030af

                                                                                                                                            SHA512

                                                                                                                                            243801344785dde21f1f4c7834d4cb04a5624569c1c2b26567c57fe05fcc51e1ceab66d94d19327896ad6eeccd79b2a3332faa2dfcfe99f2a69bbf04f60150e4

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            231KB

                                                                                                                                            MD5

                                                                                                                                            1587a2af3d4254b83a278bbad735bf3d

                                                                                                                                            SHA1

                                                                                                                                            aa4289995f9f75668ee0169af5dc7d7db81fadce

                                                                                                                                            SHA256

                                                                                                                                            3e0fe04de3293dfcf831f143de07bca2b720b0492ea6e9e6dfd4d2768950d825

                                                                                                                                            SHA512

                                                                                                                                            ee5349d05542f864f458bf1ef83b1ef8e7f6f463f79b1c9efcfe6d4f62c9e4c5592137111e0a68c805115f54f5c7e0b307c6a3656e6f47f8abfb8f9ff413644a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            231KB

                                                                                                                                            MD5

                                                                                                                                            7a8c3c0a03958d95940e445a87e7dfc5

                                                                                                                                            SHA1

                                                                                                                                            a2837df583ce9da09af867d7e3f9a61a5fc8ac95

                                                                                                                                            SHA256

                                                                                                                                            16b5c966658eee097b515e586e354d4ae1abda483ca629e60d8f5c641a3a82ed

                                                                                                                                            SHA512

                                                                                                                                            f7c2437850ba008cfdc2b8a3d7fc80178db1003f1137d8def5e88fa89acc8639fe2cf48b3dfd87e0fa81f54cbb100e2aae72a38fb362c28adeff18bccc9cc158

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            003b92b33b2eb97e6c1a0929121829b8

                                                                                                                                            SHA1

                                                                                                                                            6f18e96c7a2e07fb5a80acb3c9916748fd48827a

                                                                                                                                            SHA256

                                                                                                                                            8001f251d5932a62bfe17b0ba3686ce255ecf9adb95a06ecb954faa096be3e54

                                                                                                                                            SHA512

                                                                                                                                            18005c6c07475e6dd1ec310fe511353381cf0f15d086cf20dc6ed8825c872944185c767f80306e56fec9380804933aa37a8f12c720398b4b3b42cb216b41cf77

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            051a939f60dced99602add88b5b71f58

                                                                                                                                            SHA1

                                                                                                                                            a71acd61be911ff6ff7e5a9e5965597c8c7c0765

                                                                                                                                            SHA256

                                                                                                                                            2cff121889a0a77f49cdc4564bdd1320cf588c9dcd36012dbc3669cf73015d10

                                                                                                                                            SHA512

                                                                                                                                            a9c72ed43b895089a9e036aba6da96213fedd2f05f0a69ae8d1fa07851ac8263e58af86c7103ce4b4f9cfe92f9c9d0a46085c066a54ce825ef53505fdb988d1f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            7e1b7ff45d531a2931ee35615849f064

                                                                                                                                            SHA1

                                                                                                                                            c5d42c355799573903848cac495a4c6d1ee259bc

                                                                                                                                            SHA256

                                                                                                                                            b8e81c6731f805815e4a3e2a552608437546db93b55a507eb096dff25bfa69d0

                                                                                                                                            SHA512

                                                                                                                                            500841f6e7bd9777c94ed1067b6df5b248a0a1050c1bf2729a3796c851178504579330bcf185c60041c8f2b490a89a53e2572f7f9af8365d1bda2bf0eed1e31e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            152B

                                                                                                                                            MD5

                                                                                                                                            582a6adcd746179259aa2ff6f82b987a

                                                                                                                                            SHA1

                                                                                                                                            625f0e04ddd0715fb1c82bd5245156ac7d0cf135

                                                                                                                                            SHA256

                                                                                                                                            1db27399a207f1bb20bf8fc320d7811826e7537b24c7fdb5c8b3a8f943aceb49

                                                                                                                                            SHA512

                                                                                                                                            a4c1d6853cd74f5ea0e49dd9f4d70a0355d57d1304f74f990efb9e854c90fca6e5d42866b8715a6637b26fd95d881faa733992a6741990b641a21faf0f2deaca

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a73cf5f-55f6-4d1c-be42-e6e3ddedfef1.tmp

                                                                                                                                            Filesize

                                                                                                                                            1B

                                                                                                                                            MD5

                                                                                                                                            5058f1af8388633f609cadb75a75dc9d

                                                                                                                                            SHA1

                                                                                                                                            3a52ce780950d4d969792a2559cd519d7ee8c727

                                                                                                                                            SHA256

                                                                                                                                            cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

                                                                                                                                            SHA512

                                                                                                                                            0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                                                                                                                            Filesize

                                                                                                                                            103KB

                                                                                                                                            MD5

                                                                                                                                            8dff9fa1c024d95a15d60ab639395548

                                                                                                                                            SHA1

                                                                                                                                            9a2eb2a8704f481004cfc0e16885a70036d846d0

                                                                                                                                            SHA256

                                                                                                                                            bf97efc6d7605f65d682f61770fbce0a8bd66b68dac2fb084ec5ce28907fbbdb

                                                                                                                                            SHA512

                                                                                                                                            23dd9110887b1a9bbdbcc3ae58a9fe0b97b899ad55d9f517ff2386ea7aac481a718be54e6350f8ba29b391cc7b69808c7a7f18931758acce9fbf13b59cee3811

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fe

                                                                                                                                            Filesize

                                                                                                                                            51KB

                                                                                                                                            MD5

                                                                                                                                            588ee33c26fe83cb97ca65e3c66b2e87

                                                                                                                                            SHA1

                                                                                                                                            842429b803132c3e7827af42fe4dc7a66e736b37

                                                                                                                                            SHA256

                                                                                                                                            bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760

                                                                                                                                            SHA512

                                                                                                                                            6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            06bd3af68c2d0d0f0dfeb5a3299219ae

                                                                                                                                            SHA1

                                                                                                                                            0cfd86b32f32677531399521f6ef94577ada4bfd

                                                                                                                                            SHA256

                                                                                                                                            3c9bb442c1eb45f818cf1a2c741834ba8ca3529a5ea7c47105a13486d2509891

                                                                                                                                            SHA512

                                                                                                                                            26037db4a2387873485ab965dfbcafa19bf79b2f942a0163205065bf2a587b841d9df1cd4fc0b7586b33198fc466cf5cf6339e86ae0060e8353d9479ab76e8cc

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            8KB

                                                                                                                                            MD5

                                                                                                                                            f87ba80d65f692dd092679a010a99dc8

                                                                                                                                            SHA1

                                                                                                                                            627e7d61f9759a7e7acf3829e3e94d220db41a21

                                                                                                                                            SHA256

                                                                                                                                            d0cf8ba01d05fc94b0dbd6c94e5802848daa43c2a6800af52f574756c916d14e

                                                                                                                                            SHA512

                                                                                                                                            bad41fc1b925011fb9b2609a5d206f5d1f41af7ddf97e1793b4500380866402d8808ff8f74fc39fc0eb7c64e7bf1df8581f676c3cfe4666f956bd96d5109c7f2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            3KB

                                                                                                                                            MD5

                                                                                                                                            d26282cf6ba01de48471eae200eaf24a

                                                                                                                                            SHA1

                                                                                                                                            f7737b27e6449b1ab414e45253a277c6d23ad11f

                                                                                                                                            SHA256

                                                                                                                                            e9d879285e1f5f8259aaa26d2a9415bcdef23ed5fd8125d7d1bae67ab7a5aca3

                                                                                                                                            SHA512

                                                                                                                                            8691e141ec9829e91a1d33d8502d7be8d9d679078aa748a65e5e59a9de80f35949460f834288184b871965ba617cdda6cc1f2209ae3e9c3dedaa203b8574a618

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            83f37b19bff075fc44b44a7bf4ef78ea

                                                                                                                                            SHA1

                                                                                                                                            ee7693cc20acb5a242e768d855fada3574fb08d4

                                                                                                                                            SHA256

                                                                                                                                            e63b6f1952f8bf391de05c10e5e57f848269302ae3cefe72d5aa750908a9cfa4

                                                                                                                                            SHA512

                                                                                                                                            0df8762bbbc25a8e13c4038c43d2c305fe836298e2e52d5a02d994e11a2823cb11bf0abdaf0a9ac62a3aa22e4cc519b5b9d10df407a41c5c0445a5a94c6b6eeb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            186959fefd3173a9ed9f962762b0abe2

                                                                                                                                            SHA1

                                                                                                                                            aa13f7a67e16722ab6cd702e002accd4d59a0f50

                                                                                                                                            SHA256

                                                                                                                                            fce2b35bdb4a4d876d4065da5a29ea28c8af5118da4568867a6a259c33f23842

                                                                                                                                            SHA512

                                                                                                                                            cfadf3a2b892369c0e57f732afd474f3098a5a05025def9f6c5e071f92ddf47d475b7c35c5a22f5ea525db1f480e36768af8872b3f720c97f2ac846819917e1d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                                                                                                                                            Filesize

                                                                                                                                            746B

                                                                                                                                            MD5

                                                                                                                                            9d6c4d47bdd430d39be0b1c0ec397603

                                                                                                                                            SHA1

                                                                                                                                            c47092a66884d7244b54803f476c675a024336c1

                                                                                                                                            SHA256

                                                                                                                                            12aa0f10d2b8711a6f060bfb9d5a0211589ddffce69df914e3bd9eb40ce474ca

                                                                                                                                            SHA512

                                                                                                                                            48911982066ccabed98df2cd316345867de88e6981a7c708ef65fdcff803ca5b053120a2a0d382befb3c9f60fe5f333a27bf157555a795baeaaa85722afa253a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe5ff601.TMP

                                                                                                                                            Filesize

                                                                                                                                            770B

                                                                                                                                            MD5

                                                                                                                                            f1f9c098570b5f73b527d91825940ee0

                                                                                                                                            SHA1

                                                                                                                                            9146f9fe3c85a47527ad30317e752419064df4bb

                                                                                                                                            SHA256

                                                                                                                                            5d06937769f47746af39e33beb606e66e5773d59004b94924ab363d7e7780dc6

                                                                                                                                            SHA512

                                                                                                                                            02a151c8efbc7bb344bbda3b8b00ad9329137ac03d97d2701030c334afaf0962bc90a0fae83d74ea7a9f9bbbf9468a64e51a54709e8d5a5a80f4226f4ffddf8d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            42f978106f5682c5436916a87b9ff369

                                                                                                                                            SHA1

                                                                                                                                            e8b17cae78c5e9fbe8caadc5c3835dba51fbb223

                                                                                                                                            SHA256

                                                                                                                                            07ed14d83b14e5c664c7ad3dcf899bbd3d7e0aec1ff4665a67b7327fa4e8672b

                                                                                                                                            SHA512

                                                                                                                                            df360a127269781dc13a3790a3a3737e2017b806f554235dce1cd38665e3f1dd0a2facbb529fe7866e1bf56a87b79bfd6452d4d26225564195e543cd0df2ca92

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            77bb72b440007e99c4e667755369035c

                                                                                                                                            SHA1

                                                                                                                                            65d9c684641f7cd4010feee16863f4fd18506af1

                                                                                                                                            SHA256

                                                                                                                                            cc21ee6de884b2027b39ed7c40d58c5de8a7bd41e0ddae984fe9aa9f95f03c39

                                                                                                                                            SHA512

                                                                                                                                            83d769727d0112b3e3f343dfd4c688b3be22e3c9d97d0379560c94428a4cc95b11e9506fe5a0ff3548b0f8acbc18854ba365737114c63868b4cc51a97b503dff

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            25c6727da13a3c54156fa150ed152b7c

                                                                                                                                            SHA1

                                                                                                                                            1987e9176079863e43063eb29d6b7c74593c15ba

                                                                                                                                            SHA256

                                                                                                                                            cca61cb3765156412f4fac6eff150524d833f66c7a0deca39b6ab6e2eb9c7d85

                                                                                                                                            SHA512

                                                                                                                                            bb03195363b5638839880811f5262cc9f19d5a1543aa3c575d3683e9641db9cdc28f39e780b76cb27056d21b26f43f95a5769ba047e1a1573d79754467f8bdcd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            bc3d91c67dcd45c1f5b05bdc5c4013e2

                                                                                                                                            SHA1

                                                                                                                                            3988cbcc8d85aabb65266a918fb3d2ba7f4ff25d

                                                                                                                                            SHA256

                                                                                                                                            a7cd4056f49b679ba2422dc584702fd02534406235640e43118031a1d7686543

                                                                                                                                            SHA512

                                                                                                                                            3d5940efb8072a53a1563800ef6740c64175cfb9804625443cddfc03aec52146fc6c198462dc3eef41ea5c6d840edd646a6ce5560485321a7451d4587375abe2

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            1ac407206e8d0dc883a664f81ec1a039

                                                                                                                                            SHA1

                                                                                                                                            b649748ab33b250d9a6e7401c3cf68c47c80637d

                                                                                                                                            SHA256

                                                                                                                                            d2b91c42a9d9ea70262d3a7160b937a87db097946564f428791e889e06ff79a6

                                                                                                                                            SHA512

                                                                                                                                            57e447c1cc6cc6a6cf0cc214ae77910c8fc3ab65d2d2484309f1d914ea1e10a3b8a90d406694e54f8f5e8fa6ca3c358c3abb8f2e71b3ad49345ebade6edf5217

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            b56ac54f0269b123046e91abd3fcb915

                                                                                                                                            SHA1

                                                                                                                                            5e311384b928b7712014a7d09067445ce4775b18

                                                                                                                                            SHA256

                                                                                                                                            fd42dbfbad40427f076627f0343668162cb14b14ed63cc57a271de15e114719c

                                                                                                                                            SHA512

                                                                                                                                            b2cb4e353534e2f4b8f3a796a4fa6e555ca18249dd6294e5d2da181ad831ccfd432438f49fc81ed3dca647eb3f7a4141290f2b7ed108e40a8b1553e2d62753f5

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            e9d7af6888a4584c6cb3d58083729111

                                                                                                                                            SHA1

                                                                                                                                            6dbb5e6c587d7dd5e562c54ccee416f2d8318219

                                                                                                                                            SHA256

                                                                                                                                            c90ea49d98d19ed8bca63073de351e800e4d431bba4bcd02310bb7968ab975a6

                                                                                                                                            SHA512

                                                                                                                                            011301c1001ea6a47cf9b89866ec70c491bd6572ac11001a5978fc0c39c3faea0b923000ea3f1a2db2c935b0e0869177b18ee66b2f203231304081c277b51b77

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            d86a31eb2d4163cbedaa90ce4f40ec49

                                                                                                                                            SHA1

                                                                                                                                            98c6b669f52b950256c21390c6c777f5916dee25

                                                                                                                                            SHA256

                                                                                                                                            a3aaeaeeddf88fcef1e34e3a1ece28b6df1c740e03249970e6d4fc8d15fa40f9

                                                                                                                                            SHA512

                                                                                                                                            95887da1db6b30c2f62cea5cdb4f7e6e5eaf81ba3de17f3dd63c84f2a9cbac40ff855c9e090cbed6c6036fb889b735b3c220eed5305702b6d46054e22d55a496

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            6eff677f936620c38f402b82f66100e7

                                                                                                                                            SHA1

                                                                                                                                            0f8fe5b863ad6f90fd7e5bfa53d4deaff2b570b9

                                                                                                                                            SHA256

                                                                                                                                            d167b4f9c40051b209b4300a6ec93538fb33eeec29127f927deb2306e95df9d6

                                                                                                                                            SHA512

                                                                                                                                            f923bc3c6bbdd296eec18b3381afa2d28f899aeacdc7c55bc52d33be78d002fe8d44aca5f0feac392e72b2d788e7c80ac007be618f33e0f21b185174344b1013

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            88e16a29a6205e39627e78fd8048139e

                                                                                                                                            SHA1

                                                                                                                                            2d84d5d34d6972c577b36b33c48e32c7ca40625b

                                                                                                                                            SHA256

                                                                                                                                            0ff5a81ab6aa4ac1628d353be29be3c1868b5838e85a0e37b5535f8b9409227a

                                                                                                                                            SHA512

                                                                                                                                            1f7237b05b1dcdee370d101e8444ea26044d2cff6db34441c053ff4f42be318c10565a078bead56b62d3346a0b8b34d8ac19429e04de7109214d76239c48ae5d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            4f8bf3a7a6fe0cd374f3bb7107777e6c

                                                                                                                                            SHA1

                                                                                                                                            ac8a435ad721440c0c17d2d2da43eb8cf19073f6

                                                                                                                                            SHA256

                                                                                                                                            9fd48413a4921daec7cf82d7461d09593e95d2c7cb9b5a77fd721f391ed1b122

                                                                                                                                            SHA512

                                                                                                                                            8ce25f592eebbc869fc985fe9f2abe54626698e463bb21c9b76a8e182c4f9b6f9ace98781adc989f85b0c0f1496d216a7b9a83557993941cf9b8245e8e802c6b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            b51d322f11e3f41825b908a0746e64c3

                                                                                                                                            SHA1

                                                                                                                                            b1f30d192612a9f93ca3a331027ef4ab8f219e80

                                                                                                                                            SHA256

                                                                                                                                            c442f269a7385ceff990b798331854aa6632fe4e83705c21d62bc07ff9184130

                                                                                                                                            SHA512

                                                                                                                                            a68866443d186de83efd6ff22fd8ccf96b2dc05b92930433fff8f5bf8df465f3b1aa58f72c4d12488989dcfd653873261e7f1628cf49f85e08ad149eb2590e3f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            8c1f9fb27787d6144b883e3d169fc948

                                                                                                                                            SHA1

                                                                                                                                            18f5f65d0c4f02cdffa78b6db43f08905fa1bfaf

                                                                                                                                            SHA256

                                                                                                                                            d5783a52669eb27b2f0262e82332562cdbbf01e36181d82169d67f47b024180f

                                                                                                                                            SHA512

                                                                                                                                            4e6223810888c27c5394ace8eea91227bd2cb74b70ef9c356a4285af987bd8b9e986cd5f67d4722fc40c10f7aa915a4aa0aa80343253b0e09685a714875e481c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            703476588b5143edcde22a68b0945e32

                                                                                                                                            SHA1

                                                                                                                                            5eb223b54821810db4a9cf1878887f7e357f465a

                                                                                                                                            SHA256

                                                                                                                                            545abdccd558fec2253ec602adae2605391a38569afffb0966b6fff25ca0a9a3

                                                                                                                                            SHA512

                                                                                                                                            2d2cb4e3c0330bbcc4c655824858eb0727d10fdc9c578cb7fcec9ff496233a550a3308eeea670f02fbb94dbda0ffa1d8af2ff69c4d6e38db713e72bda9bca80a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            564e950daaf35c31c4aac05c4a0e3264

                                                                                                                                            SHA1

                                                                                                                                            71166a16975c80f12f7de3a935c96dccd42bed7e

                                                                                                                                            SHA256

                                                                                                                                            d744726316a617febe44aabaf9fdc50e4dcf9ee8f23ac56ff38fa089de6ae861

                                                                                                                                            SHA512

                                                                                                                                            067e3b14a3ac0b303c07d076d6d5f544a422e5a77f1c70584a6bf2dcd8eb44bad44942d4f9dc37a24e096dfbb4af940f4678a4a0343da48dcdc057a1ec1c9f52

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            ff606edadbdf0f5c1054fa3f7a5cc1c7

                                                                                                                                            SHA1

                                                                                                                                            acb088059a067fe319e2c6ac5c1c43aa404d4ad4

                                                                                                                                            SHA256

                                                                                                                                            06736688521a158b524c8fea54dc175b83e93fd3adef734fc8547b1e62523691

                                                                                                                                            SHA512

                                                                                                                                            cf21a28466551c87d6090ba56acdafb28aa5fc7d477d0589b6197ccbe7af1380fd648bbd034258875f654bdff9a562b19df3fda20352a84fee487456109a1670

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            c5c2b33d5a8e7d73932a5873b0c67761

                                                                                                                                            SHA1

                                                                                                                                            c14325aac5914b2291f8eae30cc26e317a98c0d8

                                                                                                                                            SHA256

                                                                                                                                            384c466d475761864c5e1d4da90131551f268cb6864db415f48dedba41ea8af7

                                                                                                                                            SHA512

                                                                                                                                            62045127e8908525313b91c051a1ca92565400fdcd6e19f2e751282b7acc3188a1da3b0105839dcb156e9567a7f4b1c8f86f5bd887f496cebf7310407130aead

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            1dc4de25be66ea4098943aec6fa30d25

                                                                                                                                            SHA1

                                                                                                                                            48c69d2b16104b6bb49d205d0b2a8560ee33123d

                                                                                                                                            SHA256

                                                                                                                                            5e6c9caeff598cb54afd17dd0d18abd9fcdd4220a570641530fabb7b0a4021ea

                                                                                                                                            SHA512

                                                                                                                                            1950b3be463ce61bf6816665b9bbe5afca6d864ff6819dd85d6392bacedb469258898a1c55facaa73a3886bdd6f00232413daf4e2c9225c2a0266558a71decd3

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            48aea0de9e8babcb70f27af7d9603245

                                                                                                                                            SHA1

                                                                                                                                            3f68426ea5ddb0325e183667c91d48159be25906

                                                                                                                                            SHA256

                                                                                                                                            47857e968afd2ea8e88c5a509c96a1e9ada5d14b6ded28e369502c85c0123032

                                                                                                                                            SHA512

                                                                                                                                            41f489bd245ceb32abf9924c4b7788f781e73d6cd5b53ad8b95e54d4224af5b534242a94acc547ec29ac8fa808137c27cd010dc52d4d9524660b2b3177ae4ec8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            b82dfdb1119f181389c54cdb4f4d89ff

                                                                                                                                            SHA1

                                                                                                                                            bc959e68daf60959e4938a24eaa2eebce7628f5f

                                                                                                                                            SHA256

                                                                                                                                            663c66164d8b3fc412d0c07e9511e49f013115343fbb27c5e47ec6860f2b3146

                                                                                                                                            SHA512

                                                                                                                                            c230f790b6d891e9c8a846acaa74965590f4ea310c853034ea2765eecbdea3c0128f685394ea7201ff2d9e1014fd62207ec7e5b2516e62aa941db020fb34d506

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            8b6b2cd887fd8869fb4c0e80db5b6339

                                                                                                                                            SHA1

                                                                                                                                            c4c63984848dd19c9df7c25d0691235b6c56e988

                                                                                                                                            SHA256

                                                                                                                                            03a0aabdc97839e5e9ce0478904b17326e62aa7a7d7117afc2744a7434f0830e

                                                                                                                                            SHA512

                                                                                                                                            184f68686a721a884c488e60b410c5c8aa3ba204f7a0a160ccb51301978f2803c8a77ef911899b63d50068ab81966426e3d3910f240b999b6cb42a1a2463402b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            db5787dc930ffdd58346a6eada930e41

                                                                                                                                            SHA1

                                                                                                                                            4dcee2134077719a0ca9f4958bb3e58e2a9dc9d4

                                                                                                                                            SHA256

                                                                                                                                            c0d0697fc0910c347ab6a4640558f252c360f12ea60a796993ca882c88ea7b97

                                                                                                                                            SHA512

                                                                                                                                            72a8c8cbe100fb46651403894e9000aa09a31e7190b8f89fb75106b6ec0c184476cf53c834cdbeeb1d42f6d8b0e56613b223aff1ab30658f5f3608aa5ae01133

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            c63be36faaaa54344e3ba43801f961ce

                                                                                                                                            SHA1

                                                                                                                                            4b72b5ecf4dc2c8a160e71b82bdd125ab9e54d2e

                                                                                                                                            SHA256

                                                                                                                                            4468224800516a41d86b599eb5e2fefa31ab729d1a9bb05af94f8e4f79669378

                                                                                                                                            SHA512

                                                                                                                                            dac33c9f185fe6db856bf717f7cec23e7c515cc029e450c15c108c60946ee5568193cb590a354aae8ec9cbe94ba25ef33ce4347faa70f6505b63629e9833ea1c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            9f779eb40deb777f865f15e366e40699

                                                                                                                                            SHA1

                                                                                                                                            b020dbf6f5001a4f7dfe258a02899702d1d9fa44

                                                                                                                                            SHA256

                                                                                                                                            d65a57a9ae03247f156e4534d9ea799a62711759b695ea3cdfa94f9495e563ae

                                                                                                                                            SHA512

                                                                                                                                            8c7ae89148303db008e53971a471c6b02861b513ebd30bdcc785e0e51c415e72063f5ad8a4f9fa8f1f1332a8fba39c990d8cc33bcc7016163d40bed335bb7906

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            a7d7d2f5277408b0e0d7b8699aab415d

                                                                                                                                            SHA1

                                                                                                                                            dcef8a5c3cda1543331be2ed64fe4b322b117dc0

                                                                                                                                            SHA256

                                                                                                                                            2c40f388d5d6a89b28e1df30a4eaa1d8d107bc1641c10cab0fd79b1df988fc28

                                                                                                                                            SHA512

                                                                                                                                            3ea535c80215d08de2c660664877252a3d7f318f9926b6598e5093354061583e27823d82ce2676d71bc8fc6721eaf34e407258bb0a35fd21eb4c9b3bd3d060e5

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            9b7f12e7532d3f92a1e35ff5669b86b0

                                                                                                                                            SHA1

                                                                                                                                            14466df4776f783d00c3756dff5ff64d0579456d

                                                                                                                                            SHA256

                                                                                                                                            4a03600dd40d996613bec2e9578bdfd95667a8dd7c4ab931ce3c6c4cf343dd0a

                                                                                                                                            SHA512

                                                                                                                                            2d7e2f8e2f470ffca0afb277f14265fce9647510ab26eceb4fce11ec13bf0a6985ec6c7de5c534fe944f3a0f01920050ec5e949c7184a659a1aad4bd851e4029

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            ff6ab8445ee199ec2dfb60d4933d80d1

                                                                                                                                            SHA1

                                                                                                                                            71bfa1b15f3ec65932834eb1a5f36bbd1bf25bf9

                                                                                                                                            SHA256

                                                                                                                                            161e08d33465b467f94e6ec66ba3cb9fc2ee23ea446ef03487f52833e1d690b4

                                                                                                                                            SHA512

                                                                                                                                            b0d7070064ee2109106336ff10ee1f4a90cf84ff04d830d540f3552d07cea1ae3448d0ca24e6d9344c1e60f20f4ad16113ff41a12813c1178f0c3257deb9edc8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            5dbfc7c72dec0fbc685fecc301b35b30

                                                                                                                                            SHA1

                                                                                                                                            bb1bc402a096672f4dba8eabc005a7e13231f200

                                                                                                                                            SHA256

                                                                                                                                            588ceebc031887de3065339fe6a40f1a944266d07ce76ec40b4ae686f5218183

                                                                                                                                            SHA512

                                                                                                                                            123bffa9381ae3b5fe4630ec95fa3d8bc467ee71ee0f78958177d3c6540035498956d56e92f4ba5a46ccc13ad8315e152d54be024e4c0c1ca5b7160f7f01c5f6

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            f52d4ccbc9e39e227ec2e92e7d1fabbd

                                                                                                                                            SHA1

                                                                                                                                            b200fc804b4bbe32a5f6d00990490a84eb602f8e

                                                                                                                                            SHA256

                                                                                                                                            dedf533c1393f270d94aee51743ac2f743a2f2a3be81503aaa5f4df0127b06f1

                                                                                                                                            SHA512

                                                                                                                                            531a6b28b5cd540671a5abeae7b36ed84c4cea8f96e64d9eeb9bd6c69c1ee38d6baa38b28396d49fc3bd82672236f45059335ccfa571e6017543fe5da6fa71ae

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            991a6118851175c42c371fef7dbf6b59

                                                                                                                                            SHA1

                                                                                                                                            8e1dc1998388066a555283dc2c42fd171f322d8b

                                                                                                                                            SHA256

                                                                                                                                            ea4e3b3339a614061d6178fd54eb997c8af732cfedbf78bb1292489a69279f0e

                                                                                                                                            SHA512

                                                                                                                                            7e61eb699a3cd117f96236d55ca18a9d25e31c18afd275c9942981b6230ea2926c6d5a5cc9f8800d441050cade9b530d8e5f439783fa53bc940fcc9e1f406f53

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            b662c5d31138422f48534b393b5fa0ff

                                                                                                                                            SHA1

                                                                                                                                            e109a2340b31dc527072e57f08c062d309f499ae

                                                                                                                                            SHA256

                                                                                                                                            9026e8a5528301460665b7bf1795f141eb46c6c583000e4f5678a2c1e7487b78

                                                                                                                                            SHA512

                                                                                                                                            c8c9be9f4e278982867f2ec4ac41ca7233aa1af5d52d097cbdc583d7be61749fcfa4757223a996e1f25cb3b8a2008b1a65d115687e37024435ea515b6654e8cc

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            1b51a4c72da907e0135779070c11628a

                                                                                                                                            SHA1

                                                                                                                                            8a0f606ccf72dd66163c0eac2e10eb42b26e5d39

                                                                                                                                            SHA256

                                                                                                                                            28d4c3b3b7347109585ab684adac6c4b52f1cd36d0298ee0437ca9cdf92a4f87

                                                                                                                                            SHA512

                                                                                                                                            07b04ce11c43f7959022d5063f351fbc3587788aa0ccfa941e674f4472324da7ae13fee0056cc0f40583d23b00f4a94337df4f6468138c4f252aba2f78357c9f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            b3d228da834d55d9b94ee4c01a2db598

                                                                                                                                            SHA1

                                                                                                                                            c848434775c489a14ad4b1d048efa5a24966b363

                                                                                                                                            SHA256

                                                                                                                                            d98b3e68b3ea88b046f4102eaf348a7afaba331b639e70bb83932e6f9e3888d1

                                                                                                                                            SHA512

                                                                                                                                            5202762882982474b1404a7073d17df500539bdf87782fa02bc7127b616785f22f0376f50c10fbac167920ef5438ac969ecf8f83acd76f3187a64930da4777c4

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            f28fe97f686845eef231ffd7a5bd597a

                                                                                                                                            SHA1

                                                                                                                                            708b3901984629baf0b1c7cf2b467c22cc72b089

                                                                                                                                            SHA256

                                                                                                                                            eaed3bc4b8661383862501c258ce06aeb17a5ca0064fcfaf7ac4e0ecf9007617

                                                                                                                                            SHA512

                                                                                                                                            63eece0d18587a3abefc210eb87071a05d1a5f5f9d8fd898d7b66543b562743cfb47c8bdc9c2ac2e87dca632e98d7ad863dc556a8aaf4f44aff231f73ffd2e84

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            9d1e5b954884cacf013dae304560eb05

                                                                                                                                            SHA1

                                                                                                                                            e86862ea81737aa533428c644c8c0127f28a65dd

                                                                                                                                            SHA256

                                                                                                                                            3756c04360933f249bdcfae38bf6c5e62662fd4f9ca83b7cd75b17c8d497a29f

                                                                                                                                            SHA512

                                                                                                                                            fe8242283b30688935476fd447c82147ce9029d3f8140fa123548d2301e26f3f63ce0d387235f32485953f7d8bd68e221d533fb87e8b8230784cbcc1fd52921e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            12250391dd71ddb94bf363c8ee1ed81d

                                                                                                                                            SHA1

                                                                                                                                            db91a1669fbf79b98ed7d0f701d20b379044d3d6

                                                                                                                                            SHA256

                                                                                                                                            424cb5552268eb3f397099f39d6243a29dd95cc3871e017710598e9f1dfe846b

                                                                                                                                            SHA512

                                                                                                                                            bc484aaf35f8c6f063c4d5e76b3ba41eb7b83a45b3d06d61b2d1f537626c098e35bcbf85542cdff9a2b66b91790ce8f83fd9d8b6d214dfacc103d7901d377e0c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            82ebff609cc287b16c1bdc15872b2112

                                                                                                                                            SHA1

                                                                                                                                            ec93abef439502ebaa25e067cc0516b84ddd430f

                                                                                                                                            SHA256

                                                                                                                                            e66c7891659afe2a10b1a8ff31429dacd49e70c375446d1e757e9b6173f39ba9

                                                                                                                                            SHA512

                                                                                                                                            8213327caaee2c9cf576dca81f0f1434033eb04638f8f3ff8b865d16eb4bddba4bc74b873666556b5c308d27c9c0af8b48b7b20b5da48c76032d8dec64e9e386

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            2d74ba38438ee3be4c76d513c99948f1

                                                                                                                                            SHA1

                                                                                                                                            041dc1d62f120018c00a47590000cc5000a6a9cb

                                                                                                                                            SHA256

                                                                                                                                            933bfad209d5b3c5230ee4846c8a6966ea9f341be4e7537159d5832cbd92875f

                                                                                                                                            SHA512

                                                                                                                                            38477749aab28a035167698d53350297183e14625c7817fd3adccc46b4dc6e30189d69286a58eda1926391c7122df95a1cfbe864c4c710c6452924f15313d7b8

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            c9c4594b33a29ed830f6f3962ab55524

                                                                                                                                            SHA1

                                                                                                                                            8633a2f2d47b74095bfb001e7578eef41a19a970

                                                                                                                                            SHA256

                                                                                                                                            d8813fb08cb479ee7c73dab3c2b916ef0c3cc1c437d9176bdc7685f761900a70

                                                                                                                                            SHA512

                                                                                                                                            2afc8860609edd3a75c2cf6c6c3b8dc1e83fab39ae93d75e6962f38975c58e70352f62baeed85041363fed48d6cab8a96e80fe8067cb4705375907056fabf5ec

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            e14b28a1c65dabbeccefc47d3608ac6f

                                                                                                                                            SHA1

                                                                                                                                            95d820fc2f748c883d85cebe423c70f6568a96e7

                                                                                                                                            SHA256

                                                                                                                                            b28cc9b0be2e057501a0e84f186a543ab6c6e0d70d22fe22d4a059dd6d918c90

                                                                                                                                            SHA512

                                                                                                                                            20f07ad6e90660bd7b5c35ed86f69631a7028a19a7788f50e8d444168916dd04124bd93cb57a64132f329b3404e96160120a8bf4df23ef4ecd1d608c91a9e967

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            bd90ac27254e7835cc3fe369d5afec28

                                                                                                                                            SHA1

                                                                                                                                            ae806c5efe865cb6b4ef7d7483828664e7424a65

                                                                                                                                            SHA256

                                                                                                                                            05010531789c3c77576008aed004d16143f1738732368ab8b9411a88fa38a743

                                                                                                                                            SHA512

                                                                                                                                            506005ff48039333134446678163beef6aca25b76d44ad3d87a43178c3564f9abf93498e6c54d55e981c8bd4f18e02a560bcb36eb52768e7021c68d12a627050

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            5a9b24195643f9c8b8498634250857a2

                                                                                                                                            SHA1

                                                                                                                                            08c338cc210637807cf5280c1114502b8f2e7599

                                                                                                                                            SHA256

                                                                                                                                            b5290cc6229b899939c3508ebddbcbdc4de326667ef0a45c0ae7598926c9d80c

                                                                                                                                            SHA512

                                                                                                                                            039db707ce70a701efb6689908ea21f43d8f3bad1f51a41b90b0b778bff7fdc949b369aa32ac7f19fb3f309be8c578b8c3f18a88c04c3f161d6bb9182584f874

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            649f92a6dd1f99bea383f40932f7021a

                                                                                                                                            SHA1

                                                                                                                                            f34bc4da445848ff6100db749f12211680f47fa7

                                                                                                                                            SHA256

                                                                                                                                            ce75f62a6abe01f9f0f2a554426958644f7841db97c04997cb7665c93ea3430a

                                                                                                                                            SHA512

                                                                                                                                            e861f36146b5856d014851bc6ad32a0b654cf411e8caf698c16c64334961cb76f03e788db79b3f56c17e1d1590ebe93e6cf53bf29946b15f520e85d6556348d7

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            3d5be5b276745397df5cc086e88555e8

                                                                                                                                            SHA1

                                                                                                                                            1352f80b20047c1cf13968397ea958b749385739

                                                                                                                                            SHA256

                                                                                                                                            e7a0c59e7c05092ccc15658c5918747071282c4f083593ab3255c9fcc51786a0

                                                                                                                                            SHA512

                                                                                                                                            4afa9fc0b7cf99e2973073b4a5f43c4e7ab6ba8d7f3db180bf30deaf1bbe5f908d7a74e11764ca27d74ff22c84b9a624dcc360c2e47c692f8ec9fc550bfee0bc

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            7d3188194b26a51fbc5cd083e40e561d

                                                                                                                                            SHA1

                                                                                                                                            e91238a05465e11714e9aff4ef6121ea9a6b4add

                                                                                                                                            SHA256

                                                                                                                                            05a6c40f491d75c1b405545c10eea5da9a2c43785165fcf11ec27d786338e0d1

                                                                                                                                            SHA512

                                                                                                                                            2fa4f5d07cdccc9bc5fcff7271eaa951374b63443c2e773e55402296f9fa17831bbda7f5c1242c34baaa4b5a24a516f382c33eba1ba8d41ef3d6cfd4f7ed818e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            93961959bf9bc1b591033b1536acaa67

                                                                                                                                            SHA1

                                                                                                                                            02e1411e99b79a820d9329985efcbfaf7866aaae

                                                                                                                                            SHA256

                                                                                                                                            b8725cc942e7646e7f917fcf0da6f03a42b9cf1fea2185853d7ed6202bb76052

                                                                                                                                            SHA512

                                                                                                                                            807d4714b008fc6d115d7d34ad2411d75c6c985ec094a68dc26707a003ddb82b782aaf981ab29030e3df9c0518d779e2b7d5df9778b0f2e16cbb0ff7e3de7670

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            872863adbcefd1bfbd2fc8ae3d7681b1

                                                                                                                                            SHA1

                                                                                                                                            074981d95eb4bef0ef26928bbced7ee33696e83e

                                                                                                                                            SHA256

                                                                                                                                            94daa404da38772e0180f874eb0c09c074a252f4e49cb811920439d60c29882a

                                                                                                                                            SHA512

                                                                                                                                            820fbcd14c57ce3e585bcca770ffe370668326ccd7663c4f79eed72fae43ae9af7dbebfe8025e0b92ec93ebd231294d0fc31311ba9ece9b70395c085dd5a5228

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            b38ff90d74349dd985ffaef57a21f07c

                                                                                                                                            SHA1

                                                                                                                                            ac403548ad66532d2285904988f5782cba48900e

                                                                                                                                            SHA256

                                                                                                                                            c58e376105ce0d1a4a768d09e81da85eecdc069f2a16dcd43a555f4608c3cc7e

                                                                                                                                            SHA512

                                                                                                                                            f9ee442c1560911868811df8d6f5b670798adef84048f403f6acce30633d6b2202c6e51623f07152660d78ed2c1eef11990312414c793ca77279603acd655275

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            7KB

                                                                                                                                            MD5

                                                                                                                                            6888fa72ee381293962b0e548aa05a15

                                                                                                                                            SHA1

                                                                                                                                            e0621eb3bb43ac8e5504338cc4f2b903cc5a246d

                                                                                                                                            SHA256

                                                                                                                                            cf1b5c78f49f72fd3ee4dc75fcd9d2f851c58d2fe04791d96980183627b56b6d

                                                                                                                                            SHA512

                                                                                                                                            35c56abcbd3d412ed91276e804464da00465795bf34ab44f84464cff6787d4dc71dc74fd34314e0344455458c6014ed27534e5bf811fed7f10e85016ad6b7e27

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            50df758d118818f1ebe7f78ca4990e0e

                                                                                                                                            SHA1

                                                                                                                                            9d3dd3e94a1f69e2d9a5c39dcab9357e962346f8

                                                                                                                                            SHA256

                                                                                                                                            2f543f4cf9cff032ed99e7ade1169d7fef31c47458ae229b7772e2ceda0dd5ca

                                                                                                                                            SHA512

                                                                                                                                            77e2a712ee97e0e71d8da1b8964d660b9fa2174b177ef2f9091fb40583927e2b90080e513131840dafaa4a0d5f7b6bcc26a299a407c83cc07eaa42e4e2a48eed

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            25e97d6dde16bc47c22151ab3cdb2240

                                                                                                                                            SHA1

                                                                                                                                            68974c9382c7152d2f82ee9db34b96bb9b5dbd64

                                                                                                                                            SHA256

                                                                                                                                            490599c38086ae1facdfe830582e2e40c7a055e3645af19419c525c7e39a5b2f

                                                                                                                                            SHA512

                                                                                                                                            026296a8eccfd50bfb0990e00e7871bbd39427b11d306ab17dcee67769eb2043700575fdd9510ee609f0f5d00e9b5cec2639a33a30fe21fed6deefea75078741

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            eb30bd44d91e64ad4218b9e1f4d9dece

                                                                                                                                            SHA1

                                                                                                                                            3740a48a5786a6d9b1ba97649fc8f7319ec92df4

                                                                                                                                            SHA256

                                                                                                                                            62cb769d308838e578e5066ad819958475c6886971332edc413891d63f592d2a

                                                                                                                                            SHA512

                                                                                                                                            eb222f311c9641be2c142817969d09aa902b073b9222d6bc5c17c4ae5df172919fd521e2df50455c6917745f81cde25223fb9691db5c639c1489b230d6c9ae33

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            2658900450a0a772aabd9d82455d89c7

                                                                                                                                            SHA1

                                                                                                                                            e60a431cffcc8eee6f11c5eebbd7a185aa4e22bb

                                                                                                                                            SHA256

                                                                                                                                            03ba1f4019034faac774280e64243b6ee8aaa7dff38e68e261a6e4a8e1432dfc

                                                                                                                                            SHA512

                                                                                                                                            47fccdc80502697292544bbf0961679101b9de6d4f9eefa6832a569a337f89ff4966952685f848545653a316ac5116d150cbb12fce6167f9e312e08b06fdf807

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            5d9a2cb2e6cd25955bbb972f23091747

                                                                                                                                            SHA1

                                                                                                                                            50d4ac4a00cab8e1992abe257baad8addb78e3a9

                                                                                                                                            SHA256

                                                                                                                                            5bdb1d4b3248671f2a76ca14b8a3e0420efa6a76d35f2c41d78f34fa30ae109d

                                                                                                                                            SHA512

                                                                                                                                            1c31afbcf08df7c8b9e03b2e88ea22d05896eda8b28e9d819b27d5a1b5086efe6e685984338235cb2a27c2fb114faf953494ac92cb91017815c5e1a3b0b01b67

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            4c773d51a704462f84fdc5573cb5072f

                                                                                                                                            SHA1

                                                                                                                                            d0cce49f972ac4e5a5daf259039da75708305363

                                                                                                                                            SHA256

                                                                                                                                            4de0592cbf7ec3637d0c79e19c5ee5142ab70d9927c1e22572576415c7e5aeae

                                                                                                                                            SHA512

                                                                                                                                            88870d2d0a3eae22b507bb6bf2062dd8f30ac076a4015e248af608fb47e84cf9dea9af7176449cb4e5b142171eed1dd2918f0a69a6bfccfbbb1578c117921579

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            3d73043b6f72a903c4053d11813f0bc6

                                                                                                                                            SHA1

                                                                                                                                            ca838a4feaeffc4fd2ebba6eaf821ad3b1170af5

                                                                                                                                            SHA256

                                                                                                                                            c55c7f83f02f0d58de7873f391ae63b42656974d8f17a605f52fd59e97ea86cc

                                                                                                                                            SHA512

                                                                                                                                            163d87805f2c949e598766cea79e2f7606b24026b5a34e3d6840ee469b02678d733ce313bb00b1a5b38f612ad884aa7f9aaa441abde90ce66fbfaeeb43603422

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            6111611ba4932aa0c4582239a997b2e6

                                                                                                                                            SHA1

                                                                                                                                            6369f122c332783314fa95724c5cfa1d078f301b

                                                                                                                                            SHA256

                                                                                                                                            2a6f3c416236dc23115e4e698282099bacbf9ed0b4f140ea7c99084dbd69edcf

                                                                                                                                            SHA512

                                                                                                                                            396c2edece96939c66816d56b1cb760d9528d3dbe9d828496711b096e2186d497f24431d17a24ac320e1d2ad514542a923c506af1c7b2dc6ca5f3ea6cbffba3e

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            26a0ea7323548c23ece9cadc41139ac4

                                                                                                                                            SHA1

                                                                                                                                            84b151e30582af27da11532f9803756d569c616a

                                                                                                                                            SHA256

                                                                                                                                            543f636baeeb35fd99676d3fa725b1158f43e2503cc6c7549ce19071ef515357

                                                                                                                                            SHA512

                                                                                                                                            70a99ef73e26ec03f2b7a0e29a4100c757d4df69e386faba5a7b65ab7276cfd908f7f9e5927720fb676f7607ee34b8d061dd4da9aafedc0308bc266a92d645ab

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            a4026a80b49fd0ba1d2d5bf30b5d90fd

                                                                                                                                            SHA1

                                                                                                                                            08fa9584a4bc196ebb76440ead02c4444e39181c

                                                                                                                                            SHA256

                                                                                                                                            f97ed5b95b6f237c33366f0bc9bcf5f0d06827008c034910c1f5160a2b6c0734

                                                                                                                                            SHA512

                                                                                                                                            5298624154e91098a5fb817776b3fcea4f1b559892fabd15b23283041f8e75c3b46100cb8e0378e5323f56df01c10f6936ada2af86382dd996a7a992d8b55c6a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            d9bf18798bce1baf3195963eb970f810

                                                                                                                                            SHA1

                                                                                                                                            983109ff54fef56a49b95bd7e68f35c2655c79a7

                                                                                                                                            SHA256

                                                                                                                                            6cbdc080d0511f78b1d11c2187710be03f13b256370d9d67d9d0b5e7f01c24ef

                                                                                                                                            SHA512

                                                                                                                                            1022f7f4b0702e3596140d2257ee2457f050f4980390714c021272986742a49e77a04e87c3d5d11183a0a510d74fbaefc90fb8779debebc5e1b5653e84f3e968

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            eb1535470997081dfcc4ca14c1383387

                                                                                                                                            SHA1

                                                                                                                                            662ed69c86686c0be82f0189c5bbb4288ab341c3

                                                                                                                                            SHA256

                                                                                                                                            fce93619507fc770d10ddc86ba5aea4a0205c9261cab1cf5a6e3c5e485e4539a

                                                                                                                                            SHA512

                                                                                                                                            7f7fa26362585a258b69719cbbc5857b0bc1bcef31076454aeea3070f5782b77ce8b08d71856fa210ded59c30d83f841d2e6fa90052924b31ab44622023aa4ff

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            e1bfe244b5713b2e64775f9d33017ba2

                                                                                                                                            SHA1

                                                                                                                                            ce8a301afc3e552da9d77b9c39ef046f6eea76fc

                                                                                                                                            SHA256

                                                                                                                                            1e14c2557c062afec52b04a426b7af21600a31bf8205b57690229ebbe58aa877

                                                                                                                                            SHA512

                                                                                                                                            af13c9cc689ca7288629100fa1b2fe02d9f605a3c26d4031724db49e3b41adaf490dca7fb482247ddde3b4c4561fc5595ec43ed8c8d72b81047de8cd4d542ebb

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            420c9a1241c308aa904cdcb01c40893d

                                                                                                                                            SHA1

                                                                                                                                            382df4e0bc5f24995113b700064723964ec8fc2d

                                                                                                                                            SHA256

                                                                                                                                            6158f5adfbfe9817def829a3208e198139b0685988586e2b8b01ae2f7ea2764f

                                                                                                                                            SHA512

                                                                                                                                            79413960d4a3c79192cfe79dac9648c107118f06fdad620d05f50f07db76502b83b09c0ace008c705fe1dfcb2405b438af180cbbe4d1f466e03a81fc0e906f3b

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            4fa95e745fdf5cf47621831e47b2955b

                                                                                                                                            SHA1

                                                                                                                                            bf762a869bc719e7ee2dfd5c46b2c3639125be85

                                                                                                                                            SHA256

                                                                                                                                            c5f7e8937984fddc02bfd030ad40f948a7d58a49d8457fc8700b49379e4f5f8d

                                                                                                                                            SHA512

                                                                                                                                            3f3dd4094a299ce9053730e41f94033b75c333eb124e3b8b32e91aa4b0dd3feaf77f3603b91166e41c89e13ad69dbac530f5f4d670de634e290832ece3e4e6bd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            138d3863beedf488e6130e392a0ac6aa

                                                                                                                                            SHA1

                                                                                                                                            23b7a3635c1c0199eef5152d0e13abb044f39f33

                                                                                                                                            SHA256

                                                                                                                                            d8e3a6d21f65fdb2312658a832e6967c4ab929a1f5337ca7a934d10ed4b2ca67

                                                                                                                                            SHA512

                                                                                                                                            b715d0a407b154ee89f888ce78944080da9be1cba57db35458ed20630420e3b775be92ab7c44b73eab6a1811758f85f68e5eadda998a83bdf1c309bda7f6124c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            34080b6071eab716dfc7e99744818974

                                                                                                                                            SHA1

                                                                                                                                            28eaa97113e84f85ad20553ba7c7107808be97c5

                                                                                                                                            SHA256

                                                                                                                                            1e88cda19aed089e03f493e742824e5baf98d6865c099f4ad2e848f381285837

                                                                                                                                            SHA512

                                                                                                                                            541beb087601881a94551975e55595c8da6d50b6f33299aea8ddf6648bde1e720700c3314270d6140f3cb742ea06cf942e4e4cac5f9b3ba13d6acee5e7f26083

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            7e22379dca1202d0ebd2f597b56b03d2

                                                                                                                                            SHA1

                                                                                                                                            76242363b376a5fcb28a2ccffbfd3c64bec33e3d

                                                                                                                                            SHA256

                                                                                                                                            380d3472593d9b275eb4376a48e05aeafa115bed01ba167c729281f2ccb09dd5

                                                                                                                                            SHA512

                                                                                                                                            39ae48934d1db297527fc6b62d160877be3b89ddf66f730b135f1146abcbe2b0174bbe5509ec2ccba799a80d6cca10f53f795acb07c8ed273f4507d01dfa2aa5

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            2KB

                                                                                                                                            MD5

                                                                                                                                            80a1bd8afc534e32113cc43c95ba75c8

                                                                                                                                            SHA1

                                                                                                                                            904b4aa7d3c4afe47b6f5f069ebf3cc14b1ba9c3

                                                                                                                                            SHA256

                                                                                                                                            cd7404d55a91061feb7ae3c95ddd206d0c4e6c10187d8cc2cfd19c19557e729d

                                                                                                                                            SHA512

                                                                                                                                            066b328b3cb3682ae84642cdc8e15038e8fc0af39c5dd65047a1eab39f3b10731dd4517c03774a6b2fb2bfce7de258957cf3413b989524307940ac97fe8f362a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            a07231bc9ff030f6c3c93e3070864ae4

                                                                                                                                            SHA1

                                                                                                                                            c710d68f643c7b453e2480dfe7aac17d0ead1103

                                                                                                                                            SHA256

                                                                                                                                            661e8f01bea0bfd67614bac36ba132aed7eb6d7ad1290f3235607e3d43cc1039

                                                                                                                                            SHA512

                                                                                                                                            a4a1c4895c8070a591b8b5467afb3f5aa3dbbc21e1ba5fecc54901a399a552981fcfa06c07cba12fec62f14b27e99e6538575c9c0a39839375af3f31ef28bfcd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            12ed400898fb4c1989fbec5cbbe3a7ac

                                                                                                                                            SHA1

                                                                                                                                            0658aabff909ce5793b7ef8d687f951c00154d73

                                                                                                                                            SHA256

                                                                                                                                            9c983231b88981c0fcb53c79edbdd4878277540dc62fa9be3e4aa69bd20f9c99

                                                                                                                                            SHA512

                                                                                                                                            97d14fe4e3ea60100012bd98431a222922c4f3e6c043e036e6f222c7807b29c432b833fdd275a3babda4ea775c4d4ce6cda47a78c95d4ef07234caa30cfa8d37

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            ed6c2e44dd05cabff7c2dbd934938272

                                                                                                                                            SHA1

                                                                                                                                            cdb388c1d4436e34d95ab7e629007c2a3f8b28ed

                                                                                                                                            SHA256

                                                                                                                                            80de83910e599ba4cc97b7b3562c14f2baa68234aa06eb38a3a5e3096a1217ea

                                                                                                                                            SHA512

                                                                                                                                            997b6469fbe321bfc6458de897e50d2d721bd4c9ffdf53fd3ffa05a1061fe67fcdecf1afd3f0a774527d64d53b48a802a9865c6f5d205047bf338a2e3b58780d

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            MD5

                                                                                                                                            6df9cf86dc3a99de26489252d34f8ee4

                                                                                                                                            SHA1

                                                                                                                                            5a143bd351c0505f1f9a8c27d92cf7416a08370e

                                                                                                                                            SHA256

                                                                                                                                            015b82cb3ed8a27b0a49b09258ebc4f09aaef954214e58b3e14b618a95275da5

                                                                                                                                            SHA512

                                                                                                                                            be12114ef22e81908534e4aefb9b6bc9363ead818cb9c2926829cca2c08ba31f64939f38b3a82d96425e47a72edbd18ef8c92222339580d9121802378e78a2de

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                            Filesize

                                                                                                                                            6KB

                                                                                                                                            MD5

                                                                                                                                            705bef73bf26082a2baef7e0071f409a

                                                                                                                                            SHA1

                                                                                                                                            f57ffaca7c33d58fe6be5943f50770e33f4e55b3

                                                                                                                                            SHA256

                                                                                                                                            afc0549343620d0f811e068006390c4ef78065ae83fdb84a91bc8d2629d3c4dc

                                                                                                                                            SHA512

                                                                                                                                            8ecaba765d877d6ff72a3ffbab31bfe68fba05b45c9d48d065fc8f6559315ec650c4c68501d14dee4144c19177ddf21d6a00e2e1c9bbe7d222235709e010e496

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585dab.TMP

                                                                                                                                            Filesize

                                                                                                                                            1KB

                                                                                                                                            MD5

                                                                                                                                            6cd4850a6f9ab65b5de9def8417c5230

                                                                                                                                            SHA1

                                                                                                                                            e7e3b0658d2b3053c77bee5e5ddceaa408605f74

                                                                                                                                            SHA256

                                                                                                                                            89f1eb045c5d2d4c578f774f3cdd962e83747fa2c1411a1f13c13bb24e8c33a9

                                                                                                                                            SHA512

                                                                                                                                            be5c3b207475c7d9a72d6b071a68733b6fa8837fc3059bbd57aa6acf05e72cfe68768184f50e1a1a755a9f4256015a818bd9fb7fa8a9667c0b6d51443ae22590

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                            Filesize

                                                                                                                                            16B

                                                                                                                                            MD5

                                                                                                                                            6752a1d65b201c13b62ea44016eb221f

                                                                                                                                            SHA1

                                                                                                                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                            SHA256

                                                                                                                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                            SHA512

                                                                                                                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                            Filesize

                                                                                                                                            16B

                                                                                                                                            MD5

                                                                                                                                            46295cac801e5d4857d09837238a6394

                                                                                                                                            SHA1

                                                                                                                                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                            SHA256

                                                                                                                                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                            SHA512

                                                                                                                                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                            Filesize

                                                                                                                                            16B

                                                                                                                                            MD5

                                                                                                                                            206702161f94c5cd39fadd03f4014d98

                                                                                                                                            SHA1

                                                                                                                                            bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                                                                            SHA256

                                                                                                                                            1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                                                                            SHA512

                                                                                                                                            0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa761ba8-dcbc-4d53-931a-a92fd10c1402.tmp

                                                                                                                                            Filesize

                                                                                                                                            5KB

                                                                                                                                            MD5

                                                                                                                                            5a2d84e07c53ccb106305cb6710fa03e

                                                                                                                                            SHA1

                                                                                                                                            efe031259d4ac45bb4d37f8375217465ff1627de

                                                                                                                                            SHA256

                                                                                                                                            8c3abb705d6519df494f173d1c6180994dbf4e4eaa1413f9dd3d80f64c5b0496

                                                                                                                                            SHA512

                                                                                                                                            6d650e4bdbeaffee4c527434306878d77f795db4955ecb0895e30be408b6f7bd16b91afd44d6239633bbca4f6149dfeb9e7e016943714037fd232845d2a059ca

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            11KB

                                                                                                                                            MD5

                                                                                                                                            86d2fa521584538a1a96ef3dc9088578

                                                                                                                                            SHA1

                                                                                                                                            488c46a1e042c85d8d1080a9e6877986e918f5a5

                                                                                                                                            SHA256

                                                                                                                                            3e75a4342c855f0f60c60a29762e90a4ed74fda2b8f5ab278c9fb593e460a721

                                                                                                                                            SHA512

                                                                                                                                            38deffcb88ad015255c25b091bd5b47ab544e6ae95dcbb3395d47aa712dac848969b1db541987063521b1374c0a9a76ffea2c4704ce5a2926efd770d63ac1b3c

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            11KB

                                                                                                                                            MD5

                                                                                                                                            cd1bee5d013107751878420501b02a2e

                                                                                                                                            SHA1

                                                                                                                                            8e407fa8b38418fa334deedf3d7c29ac4362d61c

                                                                                                                                            SHA256

                                                                                                                                            0431fd5aadc0aa3646e4a2b70334a57d4d5a68889beac8e8a34a6ba8f770ff78

                                                                                                                                            SHA512

                                                                                                                                            f2459422f412c8764a81ec51716128032c0836901211992f0c0b5ebcc549407aa6bbf390528ffa12e1fe8e6bcd9dfccd36af0ca7a6593b2f22aca398b525391a

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            11KB

                                                                                                                                            MD5

                                                                                                                                            fd2897dbc558f28fdf6691aa07b1ef02

                                                                                                                                            SHA1

                                                                                                                                            c6985220bfcf8011fae67692e50a8e59b4632e10

                                                                                                                                            SHA256

                                                                                                                                            a10b9324d247734745eefe2510f2b4852b396116b716a00e33c8d8bab2ddc461

                                                                                                                                            SHA512

                                                                                                                                            e3c5cc8510eba98943c81bf6b63f3df6757184074aa423d69da3fc038bc99095e41bfe46d4acc8ae437be2423b5b3d10ab0737a1e1ad6bf7e451d8b955a9ebcd

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            11KB

                                                                                                                                            MD5

                                                                                                                                            83fb13d483e81e38a75ca4c0b4d3b747

                                                                                                                                            SHA1

                                                                                                                                            65f5f51540ae37c037f768c061359417876f6893

                                                                                                                                            SHA256

                                                                                                                                            f3eff86439d72494146e01cacacdae7b4f2ba321f79beb257c44e03355c8d3b4

                                                                                                                                            SHA512

                                                                                                                                            54c2e52c6d98969dd376f45deb3ea9273e845d075502d9750329997be11917ce7420d960c14d6bced9a3234ac1205f0793e80587e712eb142be032090fc0fa41

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            aa447ca0932e95abcf60ecb6745e7fa7

                                                                                                                                            SHA1

                                                                                                                                            c402de25f3a7fa6f04aec139c40bc3ff37f39cfe

                                                                                                                                            SHA256

                                                                                                                                            0cbda9985d9fe34243d2491f545e9c61a7adc3e00ef2788c985e561a7758fbe4

                                                                                                                                            SHA512

                                                                                                                                            edf63f97f0f3268c7cdf02860d8dff345a22f60d4bf0c3d2647ae1b24e4362c89d618633ee07b3be5c2218b9d88d4b1c339992f3f5f997ad6e3abed24626c97f

                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                            Filesize

                                                                                                                                            10KB

                                                                                                                                            MD5

                                                                                                                                            250891169a9b1f69922f822de5e55345

                                                                                                                                            SHA1

                                                                                                                                            703150d402a07cff294553438ed2e7be8bfffc61

                                                                                                                                            SHA256

                                                                                                                                            9226d2c530abf15b4b955a76a462b6881038832fc7baeaf8578ce31922ad1a7e

                                                                                                                                            SHA512

                                                                                                                                            cfe54d189042e64414d396dec2a8596c4c9c0269a97dadf60a3d1c906b37484422de3a802dca38afc27dfb8605bc296ada0cb3295614416d313f5db16c540a95

                                                                                                                                          • C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\0589302f91aa343fbe0005be96fccbe2

                                                                                                                                            Filesize

                                                                                                                                            7.4MB

                                                                                                                                            MD5

                                                                                                                                            0589302f91aa343fbe0005be96fccbe2

                                                                                                                                            SHA1

                                                                                                                                            e522005b2f17a5e1686ec12c78c59f9ea97bf3a2

                                                                                                                                            SHA256

                                                                                                                                            24a86d06e182f61060442200d2e197a3bf1ae0757ccb60ba65137b66e63fe236

                                                                                                                                            SHA512

                                                                                                                                            63e5f206365b59426f9bd66bbed78ad0e74018f5d9485f69793fa1fbb78beb8baf3f182814c4938a123a6ea993b91f39a3d070e676bf146e622e99a4e2874279

                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                                                                                                                            Filesize

                                                                                                                                            2B

                                                                                                                                            MD5

                                                                                                                                            f3b25701fe362ec84616a93a45ce9998

                                                                                                                                            SHA1

                                                                                                                                            d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                                                                                                                            SHA256

                                                                                                                                            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                                                                                                                            SHA512

                                                                                                                                            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                                                                                                                          • C:\Users\Admin\Downloads\Ransomware.Petya.zip

                                                                                                                                            Filesize

                                                                                                                                            538KB

                                                                                                                                            MD5

                                                                                                                                            e8fb95ebb7e0db4c68a32947a74b5ff9

                                                                                                                                            SHA1

                                                                                                                                            6f93f85342aa3ea7dcbe69cfb55d48e5027b296c

                                                                                                                                            SHA256

                                                                                                                                            33ca487a65d38bad82dccfa0d076bad071466e4183562d0b1ad1a2e954667fe9

                                                                                                                                            SHA512

                                                                                                                                            a2dea77b0283f4ed987c4de8860a9822bfd030be9c3096cda54f6159a89d461099e58efbc767bb8c04ae21ddd4289da578f8d938d78f30d40f9bca6567087320

                                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

                                                                                                                                            Filesize

                                                                                                                                            7.2MB

                                                                                                                                            MD5

                                                                                                                                            a1c0810b143c7d1197657b43f600ba6b

                                                                                                                                            SHA1

                                                                                                                                            b4aa66f5cdd4efc83d0478022d4454084d4bab1d

                                                                                                                                            SHA256

                                                                                                                                            30f233f41ec825806609fb60d87c8cb92a512b10f7e91cdbb4bf32cee18217ae

                                                                                                                                            SHA512

                                                                                                                                            8f45702da43526c04b957f571450a2b53f122b840fa6118a446972bc824c8ee7acd6e197177b54236ce7f428fb73a7cbe4ed18d643c625c9f156463d51ee038a

                                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier

                                                                                                                                            Filesize

                                                                                                                                            26B

                                                                                                                                            MD5

                                                                                                                                            fbccf14d504b7b2dbcb5a5bda75bd93b

                                                                                                                                            SHA1

                                                                                                                                            d59fc84cdd5217c6cf74785703655f78da6b582b

                                                                                                                                            SHA256

                                                                                                                                            eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                                                                                                                                            SHA512

                                                                                                                                            aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

                                                                                                                                          • C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

                                                                                                                                            Filesize

                                                                                                                                            280B

                                                                                                                                            MD5

                                                                                                                                            e83b00e799d1f5e9d91a5188ddd0d996

                                                                                                                                            SHA1

                                                                                                                                            2a62b4a884abddd88d134201f15862d7c7034b39

                                                                                                                                            SHA256

                                                                                                                                            2c5911efccfb6820d35a8859cc0368f52409fbce2ad080b6f36d96215b4ac3aa

                                                                                                                                            SHA512

                                                                                                                                            aabd8d3e6db561804e24a575951a466c6ebcdaaf4c3207c86ce5c000b127872e7ed66b07eff7d3a812a5155f9a47f2f05c74c33e1a78544d8f2c6907582aa83b

                                                                                                                                          • memory/2280-1074-0x0000000000D90000-0x0000000000DC5000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            212KB

                                                                                                                                          • memory/2280-1022-0x0000000073760000-0x0000000073970000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.1MB

                                                                                                                                          • memory/2280-990-0x0000000073760000-0x0000000073970000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.1MB

                                                                                                                                          • memory/2280-982-0x0000000073760000-0x0000000073970000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            2.1MB

                                                                                                                                          • memory/2280-981-0x0000000000D90000-0x0000000000DC5000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            212KB

                                                                                                                                          • memory/4644-1096-0x00007FF9B6570000-0x00007FF9B657C000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            48KB

                                                                                                                                          • memory/4644-1094-0x00007FF9B6480000-0x00007FF9B64A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                          • memory/4644-1093-0x00007FF9B6480000-0x00007FF9B64A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                          • memory/4644-1095-0x00007FF9B6480000-0x00007FF9B64A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                          • memory/4644-1092-0x00007FF9B6480000-0x00007FF9B64A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                          • memory/4644-1091-0x00007FF9B6480000-0x00007FF9B64A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                          • memory/4644-1090-0x00007FF9B6460000-0x00007FF9B6470000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1097-0x00007FF9B54C0000-0x00007FF9B54D0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1083-0x00007FF9B7B10000-0x00007FF9B7B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/4644-1089-0x00007FF9B6460000-0x00007FF9B6470000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1084-0x00007FF9B7B10000-0x00007FF9B7B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/4644-1088-0x00007FF9B63D0000-0x00007FF9B63E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1087-0x00007FF9B63D0000-0x00007FF9B63E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1081-0x00007FF9B7B10000-0x00007FF9B7B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/4644-1085-0x00007FF9B7B10000-0x00007FF9B7B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/4644-1079-0x00007FF9B7AC0000-0x00007FF9B7AD0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1078-0x00007FF9B79A0000-0x00007FF9B79B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1077-0x00007FF9B79A0000-0x00007FF9B79B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB

                                                                                                                                          • memory/4644-1086-0x00007FF9B7BA0000-0x00007FF9B7BA9000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            36KB

                                                                                                                                          • memory/4644-1082-0x00007FF9B7B10000-0x00007FF9B7B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            192KB

                                                                                                                                          • memory/4644-1080-0x00007FF9B7AC0000-0x00007FF9B7AD0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            64KB