trickbot | 1733d9d0d3209761d0c803351b1fbcd77229c543afd4031c14af2e2bec522fd2

Resubmissions

17-12-2024 07:51

241217-jp2gravjdz 10

14-12-2024 19:33

241214-x9hr2atmdp 10

Analysis

max time kernel
1046s
max time network
1050s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17-12-2024 07:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe
Size

341KB
MD5

f0588e538f9353ff1bd1034f75137fd1
SHA1

9ec2ce0230ed771c86a75f3bbd375e79c1ce2455
SHA256

1733d9d0d3209761d0c803351b1fbcd77229c543afd4031c14af2e2bec522fd2
SHA512

3611d52aa67c3b9052f9bfcb329caf8c1785863a8898610dc67208d678fcd431d314e998278d9c98a739a54b42b9e037284fc3be82276ccc133cd71cbe9d9ebc
SSDEEP

6144:ZKFg9QEvAr0KKmFfZ/DBk4aWTl1Qlrtw8919yOJ1Nx:Zs6dYr0KKcZ/DBbpClRIAb

Score

10^/10

trickbot top113 banker slack discovery persistence phishing trojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

top113

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Signatures

Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
trojan banker trickbot
Trickbot family
trickbot

Boot or Logon Autostart Execution: Active Setup 2 TTPs 2 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	tv_enua.exe
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	MSAGENT.EXE

Downloads MZ/PE file
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation	BonziBuddy432.exe

Executes dropped EXE 6 IoCs

pid	Process
3612	BonziBuddy432.exe
6236	MSAGENT.EXE
6000	tv_enua.exe
3400	AgentSvr.exe
4496	BonziBDY_4.EXE
6724	AgentSvr.exe

Loads dropped DLL 36 IoCs

pid	Process
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
3612	BonziBuddy432.exe
6000	tv_enua.exe
2024	regsvr32.exe
2024	regsvr32.exe
1580	regsvr32.exe
6236	MSAGENT.EXE
6652	regsvr32.exe
3576	regsvr32.exe
6976	regsvr32.exe
5852	regsvr32.exe
5188	regsvr32.exe
3796	regsvr32.exe
2028	regsvr32.exe
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
6724	AgentSvr.exe
6724	AgentSvr.exe
6724	AgentSvr.exe
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE
6724	AgentSvr.exe
6724	AgentSvr.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet"	tv_enua.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Detected potential entity reuse from brand SLACK.
phishing slack

Drops file in System32 directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\SET9ADE.tmp	tv_enua.exe
File created	C:\Windows\SysWOW64\SET9ADE.tmp	tv_enua.exe
File opened for modification	C:\Windows\SysWOW64\msvcp50.dll	tv_enua.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page5.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page15.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Bonzi's Beach Checkers.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Intro2.wav	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\BonziBuddy.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\book	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\T001.nbd-SR	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\registry.reg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page11.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb013.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page10.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\MSINET.OCX	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\t2.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\book	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb015.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page6.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\AutoShortcutsMaker.vbs	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page2.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\sp001.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\AUTPRX32.DLL	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\empop3.dll	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\ODKOB32.DLL	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\p001.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\RACREG32.DLL	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page10.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziBDY.vbw	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Jigsaw.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\sites.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb014.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page11.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page10.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page5.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp002.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziCTB.dll	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Bonzi's Solitaire.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page10.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb011.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page16.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page20.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\J001.nbd-SR	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page3.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page12.jpg	BonziBuddy432.exe
File created	C:\Program Files (x86)\BonziBuddy432\Reg.nbd.temp	BonziBDY_4.EXE
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BBReader.EXE	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\j3.nbd-SR	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\fix.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page1.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page16.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BG\Bg1.bmp	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Runtimes\actcnc.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb006.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page7.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page13.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\CHORD.WAV	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\ManualShortcutsMaker.vbs	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page4.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page9.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page0.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page9.jpg	BonziBuddy432.exe

Drops file in Windows directory 56 IoCs

description	ioc	Process
File opened for modification	C:\Windows\msagent\SETA6C2.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\intl\Agt0409.dll	MSAGENT.EXE
File opened for modification	C:\Windows\help\Agt0409.hlp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\tvenuax.dll	tv_enua.exe
File created	C:\Windows\lhsp\help\SET9ABC.tmp	tv_enua.exe
File opened for modification	C:\Windows\lhsp\help\tv_enua.hlp	tv_enua.exe
File created	C:\Windows\msagent\SETA6C0.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentCtl.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6E6.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\mslwvtts.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\chars\Bonzi.acs	BonziBuddy432.exe
File opened for modification	C:\Windows\msagent\SETA6C3.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\agtinst.inf	MSAGENT.EXE
File created	C:\Windows\help\SETA709.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA71A.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgtCtl15.tlb	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\chars\Peedy.acs	BonziBuddy432.exe
File opened for modification	C:\Windows\lhsp\help\SET9ABC.tmp	tv_enua.exe
File opened for modification	C:\Windows\fonts\andmoipa.ttf	tv_enua.exe
File created	C:\Windows\INF\SET9ACE.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SETA6C0.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentSvr.exe	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentSR.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentPsh.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6F8.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\SET9AAA.tmp	tv_enua.exe
File opened for modification	C:\Windows\INF\tv_enua.inf	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentMPx.dll	MSAGENT.EXE
File created	C:\Windows\INF\SETA6F7.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\intl\SETA70A.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6D6.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA71A.tmp	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SET9AAB.tmp	tv_enua.exe
File opened for modification	C:\Windows\fonts\SET9ACD.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentDp2.dll	MSAGENT.EXE
File created	C:\Windows\fonts\SET9ACD.tmp	tv_enua.exe
File opened for modification	C:\Windows\INF\SET9ACE.tmp	tv_enua.exe
File created	C:\Windows\msagent\intl\SETA70A.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\tv_enua.dll	tv_enua.exe
File opened for modification	C:\Windows\lhsp\tv\SET9AAB.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentAnm.dll	MSAGENT.EXE
File opened for modification	C:\Windows\help\SETA709.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6C1.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentDPv.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6C2.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA6D5.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA6E6.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA6C4.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6C4.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA6F8.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6C3.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\SETA6F7.tmp	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SET9AAA.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SETA6C1.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SETA6D5.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SETA6D6.tmp	MSAGENT.EXE

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 21 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBuddy432.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBDY_4.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AgentSvr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	YouAreAnIdiot.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AgentSvr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MSAGENT.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tv_enua.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	grpconv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	YouAreAnIdiot.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	grpconv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FD9-1BF9-11D2-BAE8-00104B9E0792}\TypeLib\ = "{065E6FD1-1BF9-11D2-BAE8-00104B9E0792}"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Agent.Character2.2\DefaultIcon\ = "C:\\Windows\\msagent\\AgentDP2.dll,-201"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6D0ECB23-9968-11D0-AC6E-00C04FD97575}\ = "IAgentCommandWindow"	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.SkinForm\CLSID	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4F7AE601-0142-11D3-9DCF-89BE4EFB591E}\VersionIndependentProgID	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4F7AE600-0142-11D3-9DCF-89BE4EFB591E}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BF1B5D50-3C5C-48CE-B991-0E86D26F6F5E}\VersionIndependentProgID\ = "ActiveSkin.ComProcTextures"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDF-7DE6-11D0-91FE-00C04FD701A5}\ = "IAgentCtlPropertySheet"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F59C2A4-4C01-4451-BE5B-09787B123A5E}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C4D7E3C7-3C26-4052-A993-71E500EA8C05}\ProgID\ = "ActiveSkin.ComFilters.1"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B976285-3692-11D0-9B8A-0000C0F04C96}\TypeLib\Version = "3.0"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BF0-7DE6-11D0-91FE-00C04FD701A5}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.ComFilters\ = "ComFilters Class"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\TypeLib	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8B77181C-D3EF-11D1-8500-00C04FA34A14}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F4900F67-055F-11D4-8F9B-00104BA312D6}\TypeLib\ = "{F4900F5D-055F-11D4-8F9B-00104BA312D6}"	BonziBDY_4.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\ProgID\ = "MSComctlLib.ListViewCtrl.2"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FE2-1BF9-11D2-BAE8-00104B9E0792}\ = "DSSCheckEvents"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BD1-7DE6-11D0-91FE-00C04FD701A5}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{98BBE491-2EED-11D1-ACAC-00C04FD97575}\ = "IAgentCharacterEx"	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F55ED2E0-6E13-11CE-918C-0000C0554C0A}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{98BBE491-2EED-11D1-ACAC-00C04FD97575}	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{22DF5084-12BC-4C98-8044-4FAD06F4119A}\ProxyStubClsid32	BonziBDY_4.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\ToolboxBitmap32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE3-1BF9-11D2-BAE8-00104B9E0792}\InprocServer32\ThreadingModel = "Apartment"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSCheck\CLSID\ = "{065E6FE3-1BF9-11D2-BAE8-00104B9E0792}"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FE0-1BF9-11D2-BAE8-00104B9E0792}\TypeLib\Version = "3.0"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1A981630-37C3-11CE-9E52-0000C0554C0A}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F4900F6B-055F-11D4-8F9B-00104BA312D6}\TypeLib\Version = "1.4"	BonziBDY_4.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00E212A2-E66D-11CD-836C-0000C0C14E92}\TypeLib\Version = "1.0"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00E212A0-E66D-11CD-836C-0000C0C14E92}\TypeLib\ = "{E8671A8B-E5DD-11CD-836C-0000C0C14E92}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5AA1F9B2-F64C-11CD-95A8-0000C04D4C0A}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.SBarCtrl.2\CLSID\ = "{8E3867A3-8586-11D1-B16A-00C0F0283628}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D6589121-FC70-11D0-AC94-00C04FD97575}	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D4A-2CDD-11D3-9DD0-D3CD4078982A}\Programmable	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{CDA1CA04-8B5D-11D0-9BC0-0000C0F04C96}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F5BE8BD2-7DE6-11D0-91FE-00C04FD701A5}\MiscStatus\1	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}\InprocServer32\ = "C:\\Program Files (x86)\\BonziBuddy432\\MSCOMCTL.OCX"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{643F1353-1D07-11CE-9E52-0000C0554C0A}\1.0\HELPDIR	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BE1-7DE6-11D0-91FE-00C04FD701A5}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4F7AE600-0142-11D3-9DCF-89BE4EFB591E}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\TypeLib	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSFrame.3\CLSID	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE6-1BF9-11D2-BAE8-00104B9E0792}\MiscStatus\1	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{48D12BA0-5B77-11D1-9EC1-00C04FD7081F}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	AgentSvr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F4900F67-055F-11D4-8F9B-00104BA312D6}\Implemented Categories	BonziBDY_4.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{29D9184E-BF09-4F13-B356-22841635C733}\1.0\HELPDIR	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\TypeLib\ = "{48E59290-9880-11CF-9754-00AA00C00908}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BD4-7DE6-11D0-91FE-00C04FD701A5}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.aca	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDF-1BF9-11D2-BAE8-00104B9E0792}\InprocServer32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{643F1353-1D07-11CE-9E52-0000C0554C0A}\1.0\HELPDIR\	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B0913410-3B44-11D1-ACBA-00C04FD97575}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.SkinButton.1	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D4A-2CDD-11D3-9DD0-D3CD4078982A}\ToolboxBitmap32\ = "C:\\PROGRA~2\\BONZIB~1\\ACTIVE~1.OCX, 118"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{322982E0-0855-11D3-9DCF-DDFB3AB09E18}\ProxyStubClsid32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}\ = "IColumnHeaders"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A7B93C8B-7B81-11D0-AC5F-00C04FD97575}\TypeLib\ = "{A7B93C73-7B81-11D0-AC5F-00C04FD97575}"	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FD5-1BF9-11D2-BAE8-00104B9E0792}\TypeLib\ = "{065E6FD1-1BF9-11D2-BAE8-00104B9E0792}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F5BE8BE8-7DE6-11D0-91FE-00C04FD701A5}	regsvr32.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 50192.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe
4256	msedge.exe
4256	msedge.exe
2484	identity_helper.exe
2484	identity_helper.exe
6108	msedge.exe
6108	msedge.exe
7116	msedge.exe
7116	msedge.exe
7116	msedge.exe
7116	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeDebugPrivilege	4216	wermgr.exe
Token: 33	5516	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5516	AUDIODG.EXE
Token: 33	6212	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	6212	AUDIODG.EXE
Token: 33	6724	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	6724	AgentSvr.exe
Token: 33	6724	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	6724	AgentSvr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of SendNotifyMessage 42 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
6724	AgentSvr.exe
6724	AgentSvr.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2712	YouAreAnIdiot.exe
2712	YouAreAnIdiot.exe
3044	YouAreAnIdiot.exe
3044	YouAreAnIdiot.exe
4496	BonziBDY_4.EXE
4496	BonziBDY_4.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 4216	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	82
PID 4260 wrote to memory of 4216	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	82
PID 4260 wrote to memory of 1796	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	83
PID 4260 wrote to memory of 1796	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	83
PID 4260 wrote to memory of 4216	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	82
PID 4260 wrote to memory of 4216	4260	f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe	82
PID 4256 wrote to memory of 2112	4256	msedge.exe	92
PID 4256 wrote to memory of 2112	4256	msedge.exe	92
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1284	4256	msedge.exe	93
PID 4256 wrote to memory of 1244	4256	msedge.exe	94
PID 4256 wrote to memory of 1244	4256	msedge.exe	94
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95
PID 4256 wrote to memory of 620	4256	msedge.exe	95

C:\Users\Admin\AppData\Local\Temp\f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f0588e538f9353ff1bd1034f75137fd1_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Windows\system32\wermgr.exe
  C:\Windows\system32\wermgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4216
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe
  2⤵
  PID:1796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff664c46f8,0x7fff664c4708,0x7fff664c4718
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=212 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7376 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7964 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8340 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3084 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2744 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=9064 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8348 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8908 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9208 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8636 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9248 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9352 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9184 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9132 /prefetch:1
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9268 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9100 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9112 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1868 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9140 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9296 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8968 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10064 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10200 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8452 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10568 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9412 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8340 /prefetch:8
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10604 /prefetch:1
  2⤵
  PID:6196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9800 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10316 /prefetch:8
  2⤵
  PID:6784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10736 /prefetch:1
  2⤵
  PID:6656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9676 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10896 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9688 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9064 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11380 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11512 /prefetch:1
  2⤵
  PID:7004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10868 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10412 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11620 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8916 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11712 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11764 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484
- C:\Users\Admin\Downloads\BonziBuddy432.exe
  "C:\Users\Admin\Downloads\BonziBuddy432.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  PID:3612
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2132
  - - C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
      MSAGENT.EXE
      4⤵
      Boot or Logon Autostart Execution: Active Setup
      Executes dropped EXE
      Loads dropped DLL
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      PID:6236
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:6652
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:3576
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:6976
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:5852
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:5188
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentSR.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:3796
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:2028
    - - C:\Windows\msagent\AgentSvr.exe
        
        "C:\Windows\msagent\AgentSvr.exe" /regserver
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:3400
    - - C:\Windows\SysWOW64\grpconv.exe
        
        grpconv.exe -o
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:2252
  - - C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
      tv_enua.exe
      4⤵
      Boot or Logon Autostart Execution: Active Setup
      Executes dropped EXE
      Loads dropped DLL
      Adds Run key to start application
      Drops file in System32 directory
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      PID:6000
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:2024
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:1580
    - - C:\Windows\SysWOW64\grpconv.exe
        
        grpconv.exe -o
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bonzibuddy.tk/
    3⤵
    PID:556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xbc,0x128,0x7fff664c46f8,0x7fff664c4708,0x7fff664c4718
      4⤵
      PID:6168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11064 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,2618706540534182300,3604606513119123945,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3896 /prefetch:2
  2⤵
  PID:6844

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2092

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x49c 0x4c8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5516

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:516

C:\Users\Admin\Downloads\You-Are-An-Idiot-main\You-Are-An-Idiot-main\YouAreAnIdiot\obj\Release\YouAreAnIdiot.exe
"C:\Users\Admin\Downloads\You-Are-An-Idiot-main\You-Are-An-Idiot-main\YouAreAnIdiot\obj\Release\YouAreAnIdiot.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2712

C:\Users\Admin\Downloads\You-Are-An-Idiot-main\You-Are-An-Idiot-main\YouAreAnIdiot\obj\Release\YouAreAnIdiot.exe
"C:\Users\Admin\Downloads\You-Are-An-Idiot-main\You-Are-An-Idiot-main\YouAreAnIdiot\obj\Release\YouAreAnIdiot.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3044

C:\Windows\SysWOW64\werfault.exe
werfault.exe /h /shared Global\12305fd335a7499695382c41efc5c8e9 /t 792 /p 3044
1⤵
PID:1108

C:\Windows\SysWOW64\werfault.exe
werfault.exe /h /shared Global\84fd4ba39c684dc8aa0ecad527e84929 /t 3996 /p 2712
1⤵
PID:1704

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x49c 0x4c8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2268

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2956

C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
"C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4496

C:\Windows\msagent\AgentSvr.exe
C:\Windows\msagent\AgentSvr.exe -Embedding
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:6724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\BonziBuddy432\ActiveSkin.ocx

Filesize
336KB

MD5
3d225d8435666c14addf17c14806c355

SHA1
262a951a98dd9429558ed35f423babe1a6cce094

SHA256
2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877

SHA512
391df24c6427b4011e7d61b644953810e392525743914413c2e8cf5fce4a593a831cfab489fbb9517b6c0e7ef0483efb8aeaad0a18543f0da49fa3125ec971e1

Download Submit
C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE

Filesize
796KB

MD5
8a30bd00d45a659e6e393915e5aef701

SHA1
b00c31de44328dd71a70f0c8e123b56934edc755

SHA256
1e2994763a7674a0f1ec117dae562b05b614937ff61c83b316b135afab02d45a

SHA512
daf92e61e75382e1da0e2aba9466a9e4d9703a129a147f0b3c71755f491c68f89ad67cfb4dd013580063d664b69c8673fb52c02d34b86d947e9f16072b7090fb

Download Submit
C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE

Filesize
2.5MB

MD5
73feeab1c303db39cbe35672ae049911

SHA1
c14ce70e1b3530811a8c363d246eb43fc77b656c

SHA256
88c03817ae8dfc5fc9e6ffd1cfb5b829924988d01cd472c1e64952c5398866e8

SHA512
73f37dee83664ce31522f732bf819ed157865a2a551a656a7a65d487c359a16c82bd74acff2b7a728bb5f52d53f4cfbea5bef36118128b0d416fa835053f7153

Download Submit
C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE

Filesize
3.2MB

MD5
93f3ed21ad49fd54f249d0d536981a88

SHA1
ffca7f3846e538be9c6da1e871724dd935755542

SHA256
5678fd744faddb30a87568ae309066ef88102a274fff62f10e4963350da373bc

SHA512
7923556c6d6feb4ff4253e853bae3675184eab9b8ce4d4e07f356c8624317801ee807ad5340690196a975824ea3ed500ce6a80c7670f19785139be594fa5e70f

Download Submit
C:\Program Files (x86)\BonziBuddy432\BonziCheckers.ocx

Filesize
152KB

MD5
66551c972574f86087032467aa6febb4

SHA1
5ad1fe1587a0c31bb74af20d09a1c7d3193ec3c9

SHA256
9028075603c66ca2e906ecac3275e289d8857411a288c992e8eef793ed71a75b

SHA512
35c1f500e69cdd12ec6a3c5daef737a3b57b48a44df6c120a0504d340e0f721d34121595ed396dc466a8f9952a51395912d9e141ad013000f5acb138b2d41089

Download Submit
C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg

Filesize
50KB

MD5
e8f52918072e96bb5f4c573dbb76d74f

SHA1
ba0a89ed469de5e36bd4576591ee94db2c7f8909

SHA256
473a890da22defb3fbd643246b3fa0d6d34939ac469cd4f48054ee2a0bc33d82

SHA512
d57dd0a9686696487d268ef2be2ec2d3b97baedf797a63676da5a8a4165cda89540ec2d3b9e595397cbf53e69dcce76f7249f5eeff041947146ca7bf4099819f

Download Submit
C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg

Filesize
45KB

MD5
108fd5475c19f16c28068f67fc80f305

SHA1
4e1980ba338133a6fadd5fda4ffe6d4e8a039033

SHA256
03f269cd40809d7ec94f5fa4fff1033a624e849179962693cdc2c37d7904233b

SHA512
98c8743b5af89ec0072b70de8a0babfb5aff19bafa780d6ce99c83721b65a80ec310a4fe9db29a4bb50c2454c34de62c029a83b70d0a9df9b180159ea6cad83a

Download Submit
C:\Program Files (x86)\BonziBuddy432\MSCOMCTL.OCX

Filesize
1.0MB

MD5
12c2755d14b2e51a4bb5cbdfc22ecb11

SHA1
33f0f5962dbe0e518fe101fa985158d760f01df1

SHA256
3b6ccdb560d7cd4748e992bd82c799acd1bbcfc922a13830ca381d976ffcccaf

SHA512
4c9b16fb4d787145f6d65a34e1c4d5c6eb07bff4c313a35f5efa9dce5a840c1da77338c92346b1ad68eeb59ef37ef18a9d6078673c3543656961e656466699cf

Download Submit
C:\Program Files (x86)\BonziBuddy432\MSINET.OCX

Filesize
112KB

MD5
7bec181a21753498b6bd001c42a42722

SHA1
3249f233657dc66632c0539c47895bfcee5770cc

SHA256
73da54b69911bdd08ea8bbbd508f815ef7cfa59c4684d75c1c602252ec88ee31

SHA512
d671e25ae5e02a55f444d253f0e4a42af6a5362d9759fb243ad6d2c333976ab3e98669621ec0850ad915ee06acbe8e70d77b084128fc275462223f4f5ab401bc

Download Submit
C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX

Filesize
105KB

MD5
9484c04258830aa3c2f2a70eb041414c

SHA1
b242a4fb0e9dcf14cb51dc36027baff9a79cb823

SHA256
bf7e47c16d7e1c0e88534f4ef95e09d0fd821ed1a06b0d95a389b35364b63ff5

SHA512
9d0e9f0d88594746ba41ea4a61a53498619eda596e12d8ec37d01cfe8ceb08be13e3727c83d630a6d9e6d03066f62444bb94ea5a0d2ed9d21a270e612db532a0

Download Submit
C:\Program Files (x86)\BonziBuddy432\Reg.nbd

Filesize
140B

MD5
a8ed45f8bfdc5303b7b52ae2cce03a14

SHA1
fb9bee69ef99797ac15ba4d8a57988754f2c0c6b

SHA256
375ecd89ee18d7f318cf73b34a4e15b9eb16bc9d825c165e103db392f4b2a68b

SHA512
37917594f22d2a27b3541a666933c115813e9b34088eaeb3d74f77da79864f7d140094dfac5863778acf12f87ccda7f7255b7975066230911966b52986da2d5c

Download Submit
C:\Program Files (x86)\BonziBuddy432\Regicon.ocx

Filesize
76KB

MD5
32ff40a65ab92beb59102b5eaa083907

SHA1
af2824feb55fb10ec14ebd604809a0d424d49442

SHA256
07e91d8ed149d5cd6d48403268a773c664367bce707a99e51220e477fddeeb42

SHA512
2cfc5c6cb4677ff61ec3b6e4ef8b8b7f1775cbe53b245d321c25cfec363b5b4975a53e26ef438e07a4a5b08ad1dde1387970d57d1837e653d03aef19a17d2b43

Download Submit
C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat

Filesize
279B

MD5
4877f2ce2833f1356ae3b534fce1b5e3

SHA1
7365c9ef5997324b73b1ff0ea67375a328a9646a

SHA256
8ae1ed38bc650db8b14291e1b7298ee7580b31e15f8a6a84f78f048a542742ff

SHA512
dd43ede5c3f95543bcc8086ec8209a27aadf1b61543c8ee1bb3eab9bc35b92c464e4132b228b12b244fb9625a45f5d4689a45761c4c5263aa919564664860c5e

Download Submit
C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX

Filesize
472KB

MD5
ce9216b52ded7e6fc63a50584b55a9b3

SHA1
27bb8882b228725e2a3793b4b4da3e154d6bb2ea

SHA256
8e52ef01139dc448d1efd33d1d9532f852a74d05ee87e8e93c2bb0286a864e13

SHA512
444946e5fc3ea33dd4a09b4cbf2d41f52d584eb5b620f5e144de9a79186e2c9d322d6076ed28b6f0f6d0df9ef4f7303e3901ff552ed086b70b6815abdfc23af7

Download Submit
C:\Program Files (x86)\BonziBuddy432\SSCALB32.OCX

Filesize
320KB

MD5
97ffaf46f04982c4bdb8464397ba2a23

SHA1
f32e89d9651fd6e3af4844fd7616a7f263dc5510

SHA256
5db33895923b7af9769ca08470d0462ed78eec432a4022ff0acc24fa2d4666e1

SHA512
8c43872396f5dceb4ba153622665e21a9b52a087987eab523b1041031e294687012d7bf88a3da7998172010eae5f4cc577099980ecd6b75751e35cfc549de002

Download Submit
C:\Program Files (x86)\BonziBuddy432\Uninstall.exe

Filesize
65KB

MD5
068ace391e3c5399b26cb9edfa9af12f

SHA1
568482d214acf16e2f5522662b7b813679dcd4c7

SHA256
2288f4f42373affffbaa63ce2fda9bb071fd7f14dbcd04f52d3af3a219b03485

SHA512
0ba89fcdbb418ea6742eeb698f655206ed3b84c41ca53d49c06d30baed13ac4dfdb4662b53c05a28db0a2335aa4bc588635b3b205cfc36d8a55edfc720ac4b03

Download Submit
C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx

Filesize
320KB

MD5
48c35ed0a09855b29d43f11485f8423b

SHA1
46716282cc5e0f66cb96057e165fa4d8d60fbae2

SHA256
7a0418b76d00665a71d13a30d838c3e086304bacd10d764650d2a5d2ec691008

SHA512
779938ec9b0f33f4cbd5f1617bea7925c1b6d794e311737605e12cd7efa5a14bbc48bee85208651cf442b84133be26c4cc8a425d0a3b5b6ad2dc27227f524a99

Download Submit
C:\Program Files (x86)\BonziBuddy432\sstabs2.ocx

Filesize
288KB

MD5
7303efb737685169328287a7e9449ab7

SHA1
47bfe724a9f71d40b5e56811ec2c688c944f3ce7

SHA256
596f3235642c9c968650194065850ecb02c8c524d2bdcaf6341a01201e0d69be

SHA512
e0d9cb9833725e0cdc7720e9d00859d93fc51a26470f01a0c08c10fa940ed23df360e093861cf85055b8a588bb2cac872d1be69844a6c754ac8ed5bfaf63eb03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8110037b-3444-447e-9594-7715887bac7a.tmp

Filesize
10KB

MD5
26de6464239dedc556b858992b0a2a55

SHA1
2b3bd1856618b0dbb109713d9e44bf2bee144ed7

SHA256
650ce7a1caa442bac6157d0eb061b7ad8cd84cf2b40dd60946c11c1de8464950

SHA512
57719a8b593eefd08f0c89116c905e48fba4721ad4789a3ba0eab03dcf038862d359194caab74df60f111317ec9c9071626e8478dfcd5eee8b4cad40d0fe3f9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\871f7405-ec1a-49f3-8c7e-7cc2b2e682e5.tmp

Filesize
7KB

MD5
8807bb3bc36a8b1da5b9147dbc652eb5

SHA1
8e4a93e2788fe1a73591a01b4cf8e3567fc8d66a

SHA256
7215db8171a7e5a2be1435da78925afcb59671bfe48d682c21944f2c8b63ddfc

SHA512
bd90ecb7e9aa693a256f8e4d20ef8523402359c777a077baf9dff360c2bfdfda0e77d838868055e99313c0e4d09539be70d0e6a6ecd2f7676f485c3a581ad052

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
62KB

MD5
c813a1b87f1651d642cdcad5fca7a7d8

SHA1
0e6628997674a7dfbeb321b59a6e829d0c2f4478

SHA256
df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

SHA512
af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

Filesize
39KB

MD5
db1350dac97e1a5a6c43247d2ee1485d

SHA1
2d460767f4ecab698137b94359b24cb1418be619

SHA256
1ea0a01e7d94596869c23dbd93a9c99256c9c55a1160fffd795085ac2ae3986c

SHA512
e2648e2bcbb64027a9f505816ba28409b05fd9a76a7c747582c37f3d0f472b1a787d702a59bbb3ff87ec2fe0b5dd3e69a89667d247a667e0d4d5245c41c72689

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000062

Filesize
170KB

MD5
c40b9d33a58a56e0416682b4ffe6d807

SHA1
5bb678546c0c8162e56a9f425bf8ec2ae4fb1965

SHA256
9764e8eb8b0b9c4d0d18a77da6f068d1498a3f06be3ffa1a9db4c8b698be9dce

SHA512
1c1ce6b0610bd1eebcfdb561e7b2bf39a2e1f244fb71aa1a77fc5502348ebdb1948adfa38dd537d4b8a61ed7a1228cb405cdd5536fbcd8ac3fd3a333b9ede316

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

Filesize
40KB

MD5
7dbac6d608d3bc0f57be2efd51065d20

SHA1
3eacfad51474897bf1e8e57ffaa0cf18d86cc0be

SHA256
9ef35a1662655ac434e69a0228186be57f3e33e0009295e456ba3fa88bb2a5d5

SHA512
11769fe00d564aa85584eb1d568da436ff0b1bb334be9bd5c7f4d74e4fe1d331b6cfbe039a86200a2482e71e8b17dc7485a17e5596d62c4f90823c0394539a64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000082

Filesize
22KB

MD5
815c7e91c36e0dfae7c6990e54dcc697

SHA1
9d710eca24966e8755fa9db71021c05cff04e3f1

SHA256
de951e38e67f3ae3cc94bc9ac83d0926c5ff8e8621b08f4dafcd1488676d2d3c

SHA512
29d86065f61f6867611ba53ca1392e8be05687055c3204fdc35f90bac9bf75c46d727e78f7518ffbab6e14ef626589124f3130e0573fdf0521e7417456b7c034

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000092

Filesize
38KB

MD5
53214f37c15ce68a217e2915c835b235

SHA1
912add71f2d55aef34ceed48859cac16207759e3

SHA256
5b50f1bacf12105016c72bb57bdb3a468b274fc21d4485d1922a14e2e127f803

SHA512
7289364baa2d22ebe8754a3b0c0ee75e707d88cb925a7a2e871644899bff3a91afff924eb5f3bb1afac7ec6d5fc571dcefc20c5bbf049a1bdc1e0a8515f6fad9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000093

Filesize
37KB

MD5
fc8b9283e9c3686899120581f73dbf88

SHA1
5d2c3af2bf4a2054daf15098d95992c9aac1bf17

SHA256
27d6e4815025d7fe830001e206a4dfee19b496f302332f195ece6295f5d1f216

SHA512
9dff216af5570c81213c24076f9afdb150b52df46d0143e199d12cc1d05d7e8b21e096b129d5d722ab0b51996a41cd70f0b2f06a65f9cd127c5700fc6ce49319

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000094

Filesize
18KB

MD5
5874476248aa64a7474180838abbfacb

SHA1
82bce12fcef16b46aa29747f1f4f5b3675ea920a

SHA256
69633ea1317c6e008ec045c365f8ac1bd633db8454c1d90eea7b77368e3462a0

SHA512
7847bc55ebe9dbc4a77f634d4f2f0ad508bf2e81ba175beb071b927d0361efb6cffed65479211c719b9f6bc29b91ed8d98164ed9ac393ac31162227aa50eaf8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000095

Filesize
20KB

MD5
7be57a45cb4cfa25175b9e6683e6ec46

SHA1
da32d0bccb313405a270f64933b18b125455d0ee

SHA256
0920423488d6702e1e9863f78345fda0b9a34e5e26f3442046b35c8c19ae5651

SHA512
d48bea4ccf7e40e30551aa0b3df81a87d64ba44884ec915c13dc23491a27cb6ab15d3c7e5a7c47203ef69d7f6bbaa8ae07c275ffa256b7a3e0aeee2a5950ed7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000096

Filesize
24KB

MD5
4ad64b8276b4c91e8b4a8c29c286b0be

SHA1
1ec3308f54f831c9d77091c7778856376682e3be

SHA256
dd7f2ff3804aa453d5a974f21e8a432903ec9d51443467f53c95e97dbedf0b4a

SHA512
be01b165393d8da062c4a1752711a01edd94b051160a2f7f8e6c4f4bdf6b56d749fc3cefdf5829221527b222a7b31770b544487b2d6f4bce52cf1aac4a51d243

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000097

Filesize
18KB

MD5
8bd66dfc42a1353c5e996cd88dc1501f

SHA1
dc779a25ab37913f3198eb6f8c4d89e2a05635a6

SHA256
ef8772f5b2cf54057e1cfb7cb2e61f09cbd20db5ee307133caf517831a5df839

SHA512
203a46b2d09da788614b86480d81769011c7d42e833fa33a19e99c86a987a3bd8755b89906b9fd0497a80a5cf27f1c5e795a66fe3d1c4a921667ec745ccf22f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000098

Filesize
18KB

MD5
8cf4df82cccabc1c6590ed3d1a871f9a

SHA1
0c6e60df121acf74b5b61eb3eb25233c842ab315

SHA256
17592034935d1a5216d9d24bb190ea8f72473bb4012a8458ab728840a3e60bd2

SHA512
65a60ad5a593eed506d8dabde41ca5c17a920d1b034ea971a70a2f4d614f5b15bbebbee9ec0c7047ef13a3138d4f18ecedb7e9b05cd5a0cc151226bac9ec3997

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000099

Filesize
58KB

MD5
978ad2854fad775d9934688bcbfb7799

SHA1
c1e648cc4e23065406e0a70c5e5493c570ca5ad2

SHA256
5e92948cd63fedd2a5a7f8c21659290a1d518a20f6e3a34b221efd5f5806ab09

SHA512
370620e6f497acbe5787cc5becf07eadab51e7bc274df47c4cc6df07db3b54c86db9e3bf921dffe56a0a4dd87f2797820253345ee5f13ae8b200dfdc8a0c4865

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009a

Filesize
39KB

MD5
28a155e2ad0e42f9038b87ea28fd0877

SHA1
68058b0188ef02b85219d32374c4118320df4d6a

SHA256
2b229c4f7e42724238a11079581e56810307fd4d231308eba68757502f6008ed

SHA512
094568637227e8765d68c19be6b80964f0065ec2887c911562f47b3fc0122bf087adbf0fd655486f779b4373827f1c08442b65f23758932fc5bd43cabdb2cc6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009b

Filesize
53KB

MD5
2ee3f4b4a3c22470b572f727aa087b7e

SHA1
6fe80bf7c2178bd2d17154d9ae117a556956c170

SHA256
53d7e3962cad0b7f5575be02bd96bd27fcf7fb30ac5b4115bb950cf086f1a799

SHA512
b90ae8249108df7548b92af20fd93f926248b31aedf313ef802381df2587a6bba00025d6d99208ab228b8c0bb9b6559d8c5ec7fa37d19b7f47979f8eb4744146

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009c

Filesize
105KB

MD5
b8b23ac46d525ba307835e6e99e7db78

SHA1
26935a49afb51e235375deb9b20ce2e23ca2134c

SHA256
6934d9e0917335e04ff86155762c27fa4da8cc1f5262cb5087184827004525b6

SHA512
205fb09096bfb0045483f2cbfe2fc367aa0372f9a99c36a7d120676820f9f7a98851ee2d1e50919a042d50982c24b459a9c1b411933bf750a14a480e063cc7f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009d

Filesize
88KB

MD5
76d82c7d8c864c474936304e74ce3f4c

SHA1
8447bf273d15b973b48937326a90c60baa2903bf

SHA256
3329378951655530764aaa1f820b0db86aa0f00834fd7f51a48ad752610d60c8

SHA512
a0fc55af7f35ad5f8ac24cea6b9688698909a2e1345460d35e7133142a918d9925fc260e08d0015ec6fa7721fbeae90a4457caa97d6ce01b4ff46109f4cd5a46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a0

Filesize
16KB

MD5
6bd297ca3e7194e80a3b03d545a2033d

SHA1
6720368ae50640eedbdb4b4d3e1311a3d696bfaa

SHA256
e59224be8c0105da450467d1986adc9c315ffe34282c4b6def19ad9cf413db8c

SHA512
885a70a2634d882188241c5c725255bd2611973c3a6999220d1215ed90452bd418250e9f18e81722277777c66ebc2f693c37a988b6a2f7623295b34356b3cdce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ba

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c9

Filesize
22KB

MD5
70140ca459eb70618d6097664ee2f7de

SHA1
93a29615c25cf40cb5e75e2b1420e076b06ffdbd

SHA256
6134b51bee3daf081bf5c6ce1d2d0caa9120af51d577ccb891f7ce91a1622faa

SHA512
852e0fefd6b7a948ba8e01b1833142222e974cd1bf6943fe7b390001477200bc9f9e4cd3e3a92219c78d7f955d8d2bd20ac07ef3ef71b3565fc4acc63ca2171e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d7

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e3

Filesize
67KB

MD5
bcfda9afc202574572f0247968812014

SHA1
80f8af2d5d2f978a3969a56256aace20e893fb3f

SHA256
7c970cd163690addf4a69faf5aea65e7f083ca549f75a66d04a73cb793a00f91

SHA512
508ca6011abb2ec4345c3b80bd89979151fee0a0de851f69b7aa06e69c89f6d8c3b6144f2f4715112c896c5b8a3e3e9cd49b05c9b507602d7f0d6b10061b17bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e5

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03eef0e77feb64d4_0

Filesize
6KB

MD5
1158f729e17ea27df5d9a79b913cd3e3

SHA1
49a52caf782582e24909d3f7efb1fae8fe5b6a47

SHA256
174afe2d6ae7b6ac53d9eafca6503dbd8b024aa68339ff277f6255d46bcedce8

SHA512
f7e8c590d4adf8df9ff45c83915998873ad1e209c923c72a24a2df0bf953c9dfb6c2060b97d13ba80fd2809a3ef0795e8e78b022c6465d37ef7a0933e72540e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06cdbb7047afc473_0

Filesize
262B

MD5
b3d6010c384cdad7b17ec7883efac1ec

SHA1
a3dec7329b8346a88534bc5ccd5ba58f23cb01d1

SHA256
ff6e0b75c9eb87ca7ee5dd792d8100463f11d632013163f33323a2cf18152659

SHA512
84bf9965fd941004117396ed972d6141bc4f763c0dd82c48ed8f1b1b6cecd4a001674c9b93f73c03f6ebe07ee5c168d079ffe5cea0d7fb3ca9500a95e5d6563e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0720badf6795a0b6_0

Filesize
3KB

MD5
b4c813cbc48fa962f5890771591dd7c7

SHA1
c25c6ac0fe3ba8fb85a37f3c47f423689fbdab09

SHA256
7125573eda14fdc6a8e148d87418aca92d845ab9d16b2befb2d2dab06a98628b

SHA512
edd05688d1f78acff6a300de182c742b06b890c43af28ded6d05068f92616b893a53fce93af4d07358cad63dda0738047d54f7fcbc4c004515da70012e1d58bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

Filesize
2KB

MD5
6a0220face6f226e97e124e30a72e0c7

SHA1
63b5635cc5b820be63507fbe7f3a71e9b8b443f1

SHA256
643d42bc4c8329009947837711a2487ac4220911a70b350e00083250c625f608

SHA512
151eb46a2106d64843beb76f8bf243aa747aa825d43582befe88711b15941c6b289cba7c6fa36cafe918c800598b0345bea01ab33059ae489853e00e540cd1d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

Filesize
2KB

MD5
01a5a620fe758898edd9fad48f14a47e

SHA1
255e4d57462ce485e013b76a33e69cfdbeec3f0a

SHA256
cc41b43beace86874d3de1e0e498cc05eb234fadb463e93ced2ee903891a8c29

SHA512
8b276382ccdba0cfcc0f6c9edefb52ed31553c4a6816e67a27176cdfa62a47acb262c3bf4445339eac398263cbea383ac0312c6c5e6116d6a5f9d3a480126999

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\163cfbbbd670a71e_0

Filesize
4KB

MD5
1db54ba4bec0febada3d61d59849bda3

SHA1
f7a820e180ddeb401ab709194c7980d57b0be7a1

SHA256
1a8d2e4d418b6b8e03644d455f897159be092542112c6fe9e85cee08b3353c42

SHA512
a7e13e0926ba3fa5ef2035a25510318fec6ec9e03fe1f10f8947e74bded6a84f1d5e4386a0ffe05f8c2bb340c09515710804ef18c50683c024aabcf0f1324215

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\242d87fe25e8b258_0

Filesize
2KB

MD5
8fe0210dc68e16be76f9f42c366a2608

SHA1
2706dc4c69df5d0a9299761661d9b123891659ae

SHA256
0163884d479d13b4e381667d31e3aa36f77f536aaa659e532786d9c367ad86a9

SHA512
829fb7086b0814b08301800f44b53c93d6806fbdc6e13eae87b9beafe1b70d2be5ca96d29157702f485e50f57def761511294ff53c5916d92b647911f81298f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25a798b0d98ef3ca_0

Filesize
289KB

MD5
9dbb38fe408dc54d3632b9e7db47dbe8

SHA1
ea306000cd50610aaccd26cc1b21a157104c95de

SHA256
6f58a64fec2dd5ca60caa7d83e6e78e64b954c8e0165fc69e8c9a8d1d0864703

SHA512
c7f0016086a15a4ff30becba9df93e399a3049752fff32f1a8ba0a27a454448d198f8ecec93c66cd7146031f64a5d43642f5d85d49e77b68d00aee5c9d44f50f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
1KB

MD5
3fc0eeaccee49f1c38a34a89fb8cb282

SHA1
029cea9a6d53ccac0eb37c1a61ded321b9b86e1c

SHA256
45a7773f65472368ce1725553c0974f4ccbe96a6862e65d564a06826c0a3d557

SHA512
2374eb6ac7724cecd8cae51a3bcc0e57652b93e537d1750ddc87492cdc9a44ed3934a27b10b53d301aa663b0b6e8c3926e0cb5547bc4695b7f524787c8a4fe67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f4680e8f8f8a14f_0

Filesize
9KB

MD5
eb54b5c61fa05483a1ad1849a2226edf

SHA1
bdbcd0e57929913ca38d8a4c273cb3516d96cf3e

SHA256
904e7103ca6372fc7beba5dd33d5e79b9b7ef6c0cddd6aaa4c3f642ed08608c5

SHA512
782e36b4206d8a5f684b2319bfa9d343a76f526954d9b6c8fc0a50795743097e70e4923d7a35b1db768e81bf5c29eaba40b8c2be22c9e22b1d6a6e56d7ff04f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\378757bddf4d4f48_0

Filesize
22KB

MD5
1bb274199b726d72b6df990e34ac6259

SHA1
a98c69582cb8e103968a58ab7c447207f0dcdc33

SHA256
a76e1833949364168ef2fb067d10ac35be04744ff43418cab200a35aa605058e

SHA512
82e12b606755ecfe1b2b9f2f87a6cbe195676e19b0a4c3693556bce8eb5adde6557d88c4590d405db794cf678d7b1ae0e56800a6e8f851a64c086e5588a2840f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37afe38eb817b647_0

Filesize
27KB

MD5
dbec147df0c534f467c2653f5be8f04b

SHA1
6b82e7a0b2db193d77ace5c8daafba35121b21f6

SHA256
9a25924b64c9fb67e8e3800eff02f19570922a1394a7b75b3eef486c06109064

SHA512
d8ff954e680f31825d8b0c1b6f1ffdaf5fb6bef80d16567ab629248abdf6856baef151b154b01a072f49b4e70d521102fae1a0ebcca1905b994f77adc1a58177

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4259a0181983ba_0

Filesize
6KB

MD5
68d4034ab7a86649f4301bb8376880eb

SHA1
d2a1863aa109bbbc6ae67e178d3e49bc4d747b8c

SHA256
319ab955e723ea297dae9398072f94c768a5087f5f1321a245a2dd2c15bb37ec

SHA512
745d06bc4480999c831f4da9c37aadb5c4c788e8f490026a4376426629a8abcfab792036fcedbc048ff87324a8635b55d3169e77056d1190c1aa47c5f77b7271

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f139f229e6f0497_0

Filesize
5KB

MD5
f0263db83a139b2e34920cb5e5846a9e

SHA1
95e3b0a6a4ffad8e8ad1cef489539ced91f251b7

SHA256
2579ba228261613892ed6bda8340ae86291afc377a1c50680db2e15461a8ce39

SHA512
db9cb9d2e108dc84afd4fcf92d17c0cf6b19af0e401e082c3ea7714d68365c14f26d9583b25948c1fc5c3db1021f56aab5e2727b47dfe15da5a2fb7ac295964c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

Filesize
1KB

MD5
7141c872e919960bfd378c059a088f85

SHA1
63036a1a40798b5849f0de1e107b29308416f0e4

SHA256
e30ddf8de7caaf983199feff75a8cd31a9b09182429ad777d389fe7a8ec94b63

SHA512
5550a14cb68baf60746d7d9c0ef3989214d58e56a8a486be1a830a55e922088dcea23c3a231a48174e2ba128ddd203909c1afd1e617bd5e3387bff3ac33cfe71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
6456bebd8075d695171273580027756c

SHA1
285beae8a2333d2e7248dd2c19d6f683b53829d0

SHA256
609b196c9f54c4ebd952a807c6ff0b79abe0a430a10938c38a6e28db830ff559

SHA512
f4352982a0ac79b3b0aadfce44848fb174fe53e3a40c8c4d6a84f23e71897d6171b862743cf3aff763fd768309fb128b99cefb8e2a62f468b9c3566e9cfe123f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e9b18b0f66a7183_0

Filesize
1KB

MD5
f92230bdcfa46e3309b0f896f84a382f

SHA1
d76a3024193c2b10ef4030decf3abcce0207717f

SHA256
2bc7058847b8ba96aae55440a235f0ab005c6db698d6a1a1419bbb788f69a96b

SHA512
e38a91cdd0951919fae96a40b187858d5017120447e9723df118bb9acbe6e14bccbbea23f90ae932ff828f9302e57d367de9e141ecde3a6fe8f3b82447ce52a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
2KB

MD5
a29100d264633c3d9d6cab3255b52979

SHA1
958eb4f75cca7bd1dc33a57346f5c6d08d78bb9c

SHA256
9fd0ef6214516408a62d2bd7bb34c764c95b812e530768abd8f7e83f98f665ae

SHA512
07c6f6c8b62349da12e8c56767da1cb0186a1f1cc6cc7fc0d0f9100984c03121e70b5ab0c734bab383899405ef605d438db62ec7bce9880d8898ffaa5997a7fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

Filesize
2KB

MD5
6d23a2fcb38c3d75db95294b38acfe68

SHA1
7e887fece63a9cc4f9a63b7752bd3917252c08f4

SHA256
24ef43c753549982487218c1120963bb71c4bee3205c70cf7985a9951d87244d

SHA512
e96c633b7712a67dec0cefbd0e484e509a0b8574bbc562238032d6ec3c6fafdc138e2b9dc6c81169009b24e18d022b2a1af721adaa4633c076105a6c4448272d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f1d94d5862e00f1_0

Filesize
11KB

MD5
eb58e815f0815c8c8fc697312ee34eb1

SHA1
4af92c7c6d61f6549a3249dfd632e0763b50bcf6

SHA256
4e8cc121a170776ae069dcad68794061aa0f909108802f5fb4e5845d1f8b8c6f

SHA512
24f24d6087e8b7c0a7338fb80ac3f5f0516dece2e974f03d452d6f88944cf3b871d12cab8c6add203cd6db1250f3ebebc91040e2bfe9ba18c337f24356152c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\61a0b4d20ae0e222_0

Filesize
4KB

MD5
02d421bb0a9d6bc6e897a7384ba02545

SHA1
58ce3ccc779b659e4a25488945adc6bd8d4538a8

SHA256
4878374291feb68a37ffa9ff0fa32756fa622a2e45f6c5428ef9c7ffe8339c27

SHA512
01a7fd4852c8a590e9519a42b9d0b9e00c1736b439d0783e7b095d737b71ed67a65ad29ae1d97cf1a1b621be8b84101c5f7e472e0c7b66b6febea0259c48b7d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

Filesize
1KB

MD5
0f516b7d523e1c1235bbe9ca92cb4624

SHA1
20aeaf35d822c773496d01417a228a785f52b504

SHA256
fcf6c69679ce2150cba3d4286a72aee9ad401104444f2b365d6f2cefaf112661

SHA512
02898f0f6cef9e5fbffe9c8477ef3ac02a5c0e727cf69330a9217abbcec3eeec7b8b571503d356213071418c645082ff225bfa19ba33781c942c1951022043b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6a5e8bb53a565b9f_0

Filesize
2KB

MD5
60c670c13ebb709a3a0eb401ae5ac07d

SHA1
eae3e585f9dfdb560ec04bf45a1c3b62fb890612

SHA256
ba2c03dc495facf00740dfce6eb0821bf4e65485f189bfd0429cf308b4ba8abb

SHA512
5184b3310341597b4a42429d310b90ee4eb739707bc124fa37e142fabbf22120b1a9762d7d151811a5fda5882ed9389d00e13f89458a336dea83cf6518595bdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6aa9a2943612cce1_0

Filesize
2KB

MD5
6235147707694ea9bf2d770a6654ac42

SHA1
e4cdb4e5b3be6b7c99891a609f3f35a972f75434

SHA256
cfd30feb6c91917e4af8ad25c85f44e20864a485fb662e71858ca4661176f289

SHA512
2e61a89a4b2e7ce8095b01198ef3323bb8dc1c6fc5c281d5c3478ae44bbf9ddb86414cfd44672336a59e2a82de92ac26fa8fb498a36e35f16b63fc35a75a3823

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6db290dce274a012_0

Filesize
4KB

MD5
dc4281e5ec2fdb8a03a42b78da9aabd2

SHA1
1752416e46d262ddb9ce0f26356498f01fccc39b

SHA256
346d74ec7c6e5de560a6240ec124f37ce5ffc9fba51263c65435071a74721c82

SHA512
822f289d3e828bc94c4ef842f42e6a4a3ddf0f65667f067215345ecb457981930a91be6c80d84bff7cfeac741ca5191f4cc53ded7d2ad2161faa477469fa8ca2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71d68e68ea4089fe_0

Filesize
5KB

MD5
6ddef0067f75a53d1505aab830ff60a6

SHA1
9b6468efd81b7f0e5debefe980522b8bd0264254

SHA256
32a2e21b524a35b0960757f223d1148d3f616f7991ce294ae605bf37d06c13d9

SHA512
5862928fff9e57fa6512bb03b68a55ba69e7e19769551c8ffcf4b0d93ad9f6aa75b96aea263a732f622c46f6fc6cf6741a155760b2ebc9ecde5e2d8634b2a06d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
1KB

MD5
f40e8f7bd10b8e26954c7e28e60573cc

SHA1
faf040785687191d85fc322c3935a6f4d071db09

SHA256
acfe88b6ab0b80694242115f352ead25ebbe087e183866a28efc3fd4de13411d

SHA512
d79ffbd14689d51ccd6e7e2de7e4812cca7e62409b2f5ced8d9a26538c2695579d8f9256dc5c3a3cde649c44f6363233256aa08430a9ccc3892ba7ae5e155275

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\766094f4b47e839c_0

Filesize
9KB

MD5
acd76b1e0b55c673c97bbaa58193dc9e

SHA1
26247face8f7f97617fcf123c2783e5e429bf212

SHA256
d22c4c9f3a8d2b8abdc5f688ffd0d1ddbca5667a12f99d7326d93248883b9433

SHA512
81a233037b57559e3c505afe0495343fc29d74b6f8ce6a5767f0e437b0b0fd4faf788ac0b1118ef7413faed3da8003a0a2ee573b87d0ea22cb70dcb6a217199d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\78bc646c0524ce58_0

Filesize
2KB

MD5
e1115f58f6ec10c3f401c83618937560

SHA1
01756e5317bc613f98600d2299bcfa4b3e210b7f

SHA256
f97e56513c3b35c2b9a579284fd2fa12887685a764fe2ffd3a341d1303abfb5e

SHA512
07f369edf1233513a6f554b86c4a207d24fc88230f9f29f064fd52a1cf21ef7d85167aae78d91bd36c0c8688afaa195974b74a50ef66e992ea39fccf3c36eb26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

Filesize
1KB

MD5
44e33f635f9473d8932e3eccd2525f00

SHA1
c216fefd70b0654c86be908dc0f49ba27ec0fbab

SHA256
94a9b9c28edaa6ee64bd0b71400ef229a23fd37c2176d71d03d29be7bf5d209e

SHA512
a94303288893b97ed7716abf03537dffd6ed8a7cbe57ca5c1621a8e84771f202a316963e752205efdc7c80b35377aa396ca2a7fd920480fbf7cd234e248a7b34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8551150be49776f3_0

Filesize
3KB

MD5
789ba7d743cb23b464a63f1be9b00a76

SHA1
b7aa5546c22b6d1b4ac711ef2fab08c636bac1bd

SHA256
fa580a7742674f9ab9137fbf949a4a5aa9908315993e386403b8f1168c0202c9

SHA512
05f5247d495861d3ae0b8599a1bee4fb5f724ccd37d0324e9a35e5c40b3bb655e932c218d18fa5467c6c2f1e55608dd1156eed492f3bc3805500b372e0bda35d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\86b9cbd77d05d034_0

Filesize
6KB

MD5
245d01a1f54792b541c0af4a880fa4dc

SHA1
1d266923d056fb6d765b54769a2aad6d360baa8e

SHA256
8f9a4877dbd836f5fc67c3f1571439b4e6e4015fcd389c917eea1b7a5f476d9f

SHA512
d900d22ad8c04a2a598279ead7683d58ff1ab4fb460484432659d5b278b10d9bc2855f6d9f05d94df2d7a1bdab5105fa68ee0b52ca6064c84885be1ccdc90741

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

Filesize
1KB

MD5
09cfe0521ea8821daaa676856f013b61

SHA1
ceb2a78b5f4aa76688104aa07cf31175a6aff06a

SHA256
4f44c310eaf261f52d0be7be848f54e536cac38e6b11ab84dc9480b1cc3b2555

SHA512
94479336f99c00473b99981c71bbc1696ec53e1b05e4b8b539973dc39e91455d50b77a56a9e6eb0303a7243791d7e6a85a3a94abc4a8de598da391ce44af3cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d7d7591a1b39bb_0

Filesize
262B

MD5
010865840da206754f388e552a28733f

SHA1
be87e05a653ab1496b44b028358cd1799bfcd743

SHA256
a159ee4d516450254b086fdac1fb91cd62e30878997165b78b9b769562b55d9f

SHA512
b97c999a57f2f037cdbf24d7ae405c961579d4646fe2fa71f53a80fd626f041ad333cf14cf1aa68c83604baef78956c6c543d8b6e75b7a7bcb1fa7ce4507e731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\96bc766215a93e35_0

Filesize
1KB

MD5
2c72877fd58899139f6ee5eaf7a6baa5

SHA1
5ba22f088cae30a31e1e63cf3c6abca621b7744e

SHA256
f73ea8a2911c8823ab85e96c632515d24022ff4f95a08af38c1f365d70dd46ff

SHA512
0bbf9dc7cd75cd63ce7c24a586d3e09f34311472f227ee2901d9a4cd3fba6b027a8a0998fe67d383ee5582df0ac5433f6eaa3b4b8a267cef8367fa0d79e41ff1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

Filesize
2KB

MD5
dec66a376f5ef0304c6d8940b42911ad

SHA1
873c9b12aa69c041c1bce90c4ccb3f9f9890c07c

SHA256
97ed19178f992b96fc28ecf7ca5accdec8637df906b1321bc684250ff6d81ab1

SHA512
5c782bc04c630c2fa33095703f758e90f1e52b506b8990cf1ab1a0b347c85359b782cc4eaa833243e1e862346d224bb2f2ceaa9669f570ac2e9aacf34247176b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d693ac0f52716b_0

Filesize
3KB

MD5
7e9a1a7ab33352a2c34eccdc4b4b9ad8

SHA1
19b103d89f4755966080b9eecdfe4258e8028d74

SHA256
e429cca8cbc858497a103d256fe2a8b66d11441f3f57154577397022027eea94

SHA512
32acab7edf61629481f8f0234318a32557787ce22a2de241f6b7db2772ec8429e761a247d7075aa44d3805c069de12fcfcbb7f655d8070ad1e9bb20f4c5667ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3e82669a81c981d_0

Filesize
2KB

MD5
100281f4182776ae484e1ed49354e004

SHA1
498c9308616a0650534a18a09128482e497c70da

SHA256
5b6b83715b3f5325b9180fb61919dd62a2577ff010419be636f5a7dda5e76c5f

SHA512
048e961f93f899b31b133ef8ec7a753ea9dd660b3766ae91afc5bc842037a7027cf5d363ca19821ffc6187f5e1ff9e4ffe1bb32c655c95e2e228b56eb5d3283f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be6d12311ce2b399_0

Filesize
1KB

MD5
350e1ac5d91bd6623171a10e05af7684

SHA1
1ffaac1b1917d8f87c71e2a83d39b17ed3ce62a2

SHA256
40fea300096d56b1c6020289cac3c1d8ef55eebb1d2d01234d981bbe8c708b95

SHA512
961b6dc1cf4e955ea4585c080cf721fbb89ddf125ea55a7420eafc119b6d72e5f2a78849c3f88d2e0a077def8fe604a8c54f5ad6b18089c1112d8e52e715e653

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c211c9dc68f4bf01_0

Filesize
2KB

MD5
8619fe96f9a13df3867ea85f59e0c1d6

SHA1
327fe7ab88012f21cd284d69f67b47ea20ddc5c6

SHA256
64b6c1bd48198c215b86daa44beeeaa04f4940f6d5b006170aec6ce662c374d6

SHA512
e4caf5e3017c75c16767cde9b12dcd890cf285740a23345d23672a77bad9562d20130a9b06fd8adef196c4f8a52941c8ea62d03c6856e498598e1e8d1de6ecb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c91c845c83814759_0

Filesize
14KB

MD5
1bc26d1d932c9bf0a5e41f1947c72a44

SHA1
e3733b0ec929094c131fd2dcf8ee83abca06ac57

SHA256
26ed91c78aabcd5f12ce7ddb39d48df0ac8abc755e2323223a4364c8bdc62414

SHA512
335c9240c7bb35d3de8c9fdaca9d37c4c66be11d5fb9fa238097c532748b378e42d16fc066190ca70a266200d675934242b5048d79f7ca5574a1ac562d1ee873

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca5bb3c84b908d6e_0

Filesize
2KB

MD5
f511c515173a85e5465df86a5113d358

SHA1
03e2a224cd99f5842b90a9a1bb914684511c1c5c

SHA256
3594af32f4fa73a3f0b828bc696251bb6122b28e3574ce49d28ec63e8d525a55

SHA512
188f79a8d1d4d382555d49cbc6ba1c9240590a4302128c2994a0c64fff1d2e40b13daa25805d76c1ad27e94fed6cfe82786b2fc106eddec1f260c387683f5bd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd9a47d844308cbb_0

Filesize
6KB

MD5
9543db2c7ce797745b81e10caa866925

SHA1
39e5bac1a0241fd03da8366c32e1832cf9f3cd4c

SHA256
627afb0af829d09c5a92c6434a28f1c5b30b2dbffa5718b89d2357f0fe15289a

SHA512
aba6cba72b6bcee49d920feb31adfc7eb7051a15aa61b4fdc3edfd08b5c04f487df65374ea166c95bb7219b3a1b7584166d6ecc95bf606b90940f4dda7bf8ece

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d2f9a2fc02c20de3_0

Filesize
2KB

MD5
c3b0a88a8d32a4497e0898fe598e5445

SHA1
6775724826c34a2381422835512f7590168e05be

SHA256
7dd7c1447a30a227fe762034548a0269ac956e4df7952665f2b0602ccab1f6a8

SHA512
9ced993e81318cf3cadbac3b377ec0c73955ab220ffcfa9f707d7c8477b56c7a3213fd6905fa2e2f903cc859a287d8d08476a84a714a18dfa80921e7b3760c7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d45aae6d8d9c9ff2_0

Filesize
2KB

MD5
f27e4eebd6d3f0de45c3b812553ba30d

SHA1
52fed4cc2096f65889e1436cabc135edbd977d9f

SHA256
b57ac40aeed5064fab99aab94f1c2619feeb2a5bc403452aecb5cb4ae8a32544

SHA512
fead9500dd43880c5c7f9dac8a0f787d47ff1e822d988ef4637f0463df73e8f9e3440ec3c55646cb4f96eca54309cea470502fe71a705d45c7f7ff949d5214d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d79e0a2891fc014a_0

Filesize
262B

MD5
47e6f0a9256ac8de4cbee45d19757631

SHA1
a54583c60e6001e3f605ab19df322db97ddcddac

SHA256
b8a0955e72d4a0f41f1a77ba234737954fa57b9e34ad649f0bed4ac84b86a140

SHA512
37826ad68b95339d89f2a577fd1184632a7b32e08631cb1472fac4be6f8f11ec84d9a7fecc908e59d32b8352dc44367d4b10ced7b9c20246f0d3a975efba372e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\da82014a94532e8f_0

Filesize
29KB

MD5
048c05f9a10990b1c4f737530e5fc84f

SHA1
7b2eb662e31e14a0ca33123bc353c4b3fb2a24e0

SHA256
68e7eee7d2098c3598e955352799e3325318a3dacd0898a0d1bf5f3900fec8c7

SHA512
8082c4d38d4d81b970cb7807faa17354c9472b4fab2de526c6e537d0196fcc0d2cefa18d023e3cc226a8a5953bfa7a192f885f28852191503f94a443d54faa94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e146fd968644d345_0

Filesize
6KB

MD5
d8d3593fdccb36b71389919eae526296

SHA1
762e90a1db1691ae0939a2bafc74e738517f575b

SHA256
7d3eb7eed4f2b167c17bc274e779bf4fafaa22f353a8e2bf443d193743c1821f

SHA512
4b88a7e8aeae38ce440735c92e8e0e922277821b873b01e90803156cf94cb00dcfe6ae644715e8e1748fecb05a872a0007ca72f3ddf7320904d71cdd437eb437

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0

Filesize
47KB

MD5
f33ac974c95f6ccbfe707f1355f77e4d

SHA1
b8a5fbfba02da73e78ba506f10786d0a7f2f691c

SHA256
ddc932c7778675bb838fd0cb81255b373ce1468f8e52200f305318e7b5b8c45b

SHA512
31c49c2673d6b3d6234578e0648acce10cafaf9cbd3584faca934f87cc9ee4aa40e8450c10ca05366ecbc20fbea7b28eee494191fa73bcffbef68ec2db263166

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2bbe91ee05d4b26_0

Filesize
14KB

MD5
0588079714236fc0f8f62b1160ea4130

SHA1
2c75cfb44e15b7833b3f8a575620d2b5eb759751

SHA256
0cf525b24d53508fac53e4af919190316a6e93dde408c5cc5e03b2499d355c7e

SHA512
5be5dfb21605ed989d46a86ad6c95f09cde741697abc6d1080729ff7c6617eebfc273b08f7c2d1315572be7454c77f4368ef4fb4eb684a09ed342c2e50c0382d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

Filesize
2KB

MD5
2a368ed506fdadbb7733fd6093f818ed

SHA1
032b9cf49fe8a97ae10eec852b2210b91dffc57f

SHA256
22d2f5126cd3da62da6ca1fb509a3ed129c46cfdb6ad54820502f96fcf947e42

SHA512
c63252fa07669eea7a0e97aa497390de60d45f59645729003be2ad5c2ceff4d28ab99061020339820cc1ae7807cd480ab2a53e2e4fbec185e1c96a84bc9b57c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89b9a653e8f7d3d_0

Filesize
75KB

MD5
a7c9dd8c31031d4a4b9010a781af6ea8

SHA1
2743e05c96f1782be72819a3fc81409088bd4f85

SHA256
f1dc9767faa27b1f3d94ca0e768fcde68bdc38e2f8c28fddfbd805bc3e380e1b

SHA512
4062d603c9a48e7e51bdb0773e6ab85b7ce112c9e52f5b727e00cc4c8b15a6ab917abdd5f84a173b6c761e1484677b3afb4ddcbadda79348e5dc934b5453a655

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fdba19eee00d8b09_0

Filesize
175KB

MD5
cb96a2d144c5fd1b473e2729683827de

SHA1
8011dbb85cfa61ff9d172987f6271efe06fd4c99

SHA256
d9e5f25443e71be4940d6e94da308ecc051d83a7a8d6e88286b6d1884bd171ef

SHA512
189b68352d7606521b35a061cf3d724a6d9a4c2f0fe05e872c05178a9b8c3914a9ed00df1b35e010d39d214acb9fa89ea15a242aab2026a14d1cfb234bf13e7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
17fc9d9f34ad9540d4fa37aebb88dd9d

SHA1
9cf702f8932ca1ace2c5c2afce6fb44ef2cbdc11

SHA256
a9cff2bf23efc4b444c56a46fbc928d15f97f5dbb6d15644919623e061319d80

SHA512
b0157450e8a9a74dafb5a530d07dcdd232361858e731a632b7cb35fb444b5c77433f997c1e375fe4d52ba24d47c5326745f5ca48d1fa6cc564dee76a8f8e898e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
f21e71d6b1829eb22c46f7a04bc5c0e2

SHA1
e949b86a2f0497251a65896bcb686e7a60a95aea

SHA256
c4fa37566fcf18e0e0710c905b018ede2d601b87ecdb7c2c07cdaf4eeacd8a9c

SHA512
28dc5629f1d1271c0a675c28b5e633517f17f963e2374243156f1e81e384a07e8bbf90cabe00fea57e54f1ec0cf204bea704fd024fe7a596f7774677e0d6c0e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
10KB

MD5
b32ef51c13a3fce7c01d80c333367b28

SHA1
072ba4e8d85285ce1fe84db0713246a663a70690

SHA256
55ca9fd6a273f9d97989e5e553c489cbcd4f4ec0751fd4ad8be84ee837cac4b0

SHA512
1b878061cf4a98d01f2c97cc7271af705105104dca649502c919fc06f65d86a46912dcf1daa62220b29bca729752a1928aa4fc489e1cde1bd3f7b79111510b0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
bdbf6702f99c0d65a67c889cfcaab798

SHA1
28dc718436935864e7c04e1d2eaed5f0b500d208

SHA256
04346e9f8d5e8830e4119c3f6e5a1d9dab68ddf0cf92cd3f5b0b4c73ad173404

SHA512
1e26aa08ec1996f0cd6ee43163e8958ceefae344bff23b7d425fa3969307826a452136fb626b7cd79279cd6e24d02a4419ac12387ea5d4daaaf1e2467ac63105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
4694175cd8b5ff97f42ad504939b4b0e

SHA1
eab895e5efcd4f9448a89ea2883887bf2367379c

SHA256
2a244a2e880e977300df82b29a05336d2d63aae08fbbb5eda59ce52362cc25bf

SHA512
f0afc15ffdc4822f9b030143ff3d5100ea623c59a44629ca5ef9b289fd281318d7a636e7d2c6719aab76e2f15a1a06c90d285af30c2d4cd15cab82fc908159a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
280ec98b454a34d2102fd64f1e7d1ffc

SHA1
17c1372777a79275126e4dab1d80d1cc8dc16a12

SHA256
b1a33975acb11422b8e0e8471c4d761f62c83471f99e538246b884a4d269608c

SHA512
92d23fd93792b20072c2a49ba2ae433e4474a06fb8c9decace49b846456d1ba3644f588c15e0b000af95e08150001ca786a2ba9ea486b33bfff5cdeff34b8a4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
10KB

MD5
42479eab97cbfb22aa899324f37ea135

SHA1
ab7a5070888c40985e8f960a664a1494ac716d8d

SHA256
b4fb52df8421e7e16274950ef87e31e43ed903a4ff1de6d6cf49953bb0f98a76

SHA512
35f88f5497c919b4acc6f809d29f2526651a79442233ed6e28c910e6f0ac15e20d363ce9c21f423f62fce59af3b1fdbf7dc8828c4603ec7a0dbdc6c248ec26c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
8d2d7e5b51cfdd64b0a8d76b172fada8

SHA1
a617b53ff77e558d2b9a18a13ed8dfd072f5bac5

SHA256
49245265ef77dc65f0cd6115a5baeccf47d45c480ef4f136204e66715253b085

SHA512
a1f38153dfb46cddbca65f3406855e407d8d2e575e87390401d081d0206a716bb9cb909a7e52b203797809a6f71ce05e47ecbca63ae9890cc802ec53c53c4103

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
72B

MD5
d069eb042a7da00b22fb9a542e9fcfff

SHA1
d9958b9c1e2b8ec852a72575ee0d03ca16bc1bd1

SHA256
8ff1e3ce28919cc78ebb48553370707d2b22191d1ca8a0222db165e26482953a

SHA512
ee069d9b0367d64afe4fa4c6b84990906bb5a546e9438856a0e39f7e37b015a66f25e859cbda607302a6d1fa2ea086d1c45da0ab8b62f595b0177370d6bc1e55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube-nocookie.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
9KB

MD5
3c31acaef00458c805ed69097921b553

SHA1
01ae9c6e0e304c29c11f80884d07f60616ac0138

SHA256
734e7ed3576783ef1d6fc14d12523a6fa8996e5318e43e160e7a1caeabccff8c

SHA512
795c232cc1e5c834bf8b234dcc91b20a8e8ecb9797e27ff32a3ebc67f4edce390cb95e7e345d47922106a39c29b0cb9f6100e2e59cf751a78c4e6a8f2cb66aa8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
16KB

MD5
82a24a5da797e4d58f1327ecfbbaacf6

SHA1
e8b3a2229a280b859e5e949f21a5fedc3fcf0cf2

SHA256
2da29c2c3f8cddd7b0504fe04d24addcc0e29d058fb05aa4438ea8e3427cc1c5

SHA512
d17f44ebe9af6ac91425b40e0d8f7c90adf7b58823be6b0c21a385d850e9e5eb959ad802aa63c5f2ed655e19b970a986c644e95d97498bdd1a426a19137ca14e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
592bc4b74c4e78146e78a21cd36f046a

SHA1
30bb545cd322cd7d72184284cbe6c9df07e998c0

SHA256
9d1441fb8e47c2ab76c39adbc8da3a24821e8d7d02aa526fb1011aaff0cb45b2

SHA512
aba04ec62c2e0711e5d7454585b60735524b8a6756f63b6e8705c360c69d63f97420cee28a08eb6cfa6e1eec2a56d1a27d82881e1592b924b504f42a289e4393

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
3a3a21479ea39b12a30b9afb84bcc78a

SHA1
401491eaa4ce1cea283b0f32f2aca79db93d78b4

SHA256
437e84ba0a7856b4c51f8fc53fc18d1b665b102944fd3a8cd2d848663ea3914c

SHA512
5ffa94c92262dd9c44bc971ccb04c37be8d4edbeb22d92592ad49e20313906f239cd78fd5d702f56ea26c4495cc323e717e8bf8dc6523da24656e05ed749cef4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
88618d779cc1c64ff4a428984adea9c5

SHA1
be9b4d9645ec76fdc2bf2a3049868231ea9dd1eb

SHA256
017cf89219b2e5bc759aff6f9608bbbbd218cc63d8d5ef5ce643a7a4e4fa626e

SHA512
ac515364dfe1edc940554d643b428fd75c41af58ebc86a0023e3df3b09765464d234829bb7d70cf1b4fa65511c2aa948a92266fca51d00f27ead1d8f59a66219

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
17748cb072c36dca97c80365abf31ce6

SHA1
be92dd7843ed57d34358ea0de9e2ec76508c5b2a

SHA256
c6b84d3b7558ff05d80931a8badb2442d852ecd6e8680d5b23f60da2bb1360d1

SHA512
34db704fff525514a8490a7f2fb1176889442a79bc73a7003768707b3129d2be88d041ce084a4f5ccc2e28c78548b13d2a0fe9ab4a5d8e1a1032044a8e80ef89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
b82405b7025ad3454a311391785a7c1d

SHA1
fdfaafdcf159a4666ee0ae6d947c70aba85a9de4

SHA256
6ba177e82f2dca9dee9b3ec10279bc8d3cd4ced5d089564997059ac14716e129

SHA512
3cc44569c2d9b789342d6ba6ba48f0fb242bf99cf747617b87923761220e35025c294156c9a1f813c2dc0b350a30636351305f9cb2abc00d7874ab001d88b992

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
2bc2095d953b722f4db0f203343fb2fe

SHA1
8ef1d57f377a864d6496bddbbd63028b3a63fe55

SHA256
14572ef9af131337eba12b027268a9d4b5e6d2aa26ae6f62af2f2dc81d712092

SHA512
39034e9866cf3e5bbf839280f3fab0bc08b66edd064bdab953e011708861e1c0fbd128d4f06cd0831d5f874cf443217f1d640e17678832274226a1a3f3432fa3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
f32ffe185de82c8d1290d9b0d7eda2a6

SHA1
1d1e9ae2365fd5cf6d8b469990330265edae234b

SHA256
83a65c15fb2c7d9b329df33e3e8148002ca7fd06b5343b1d47bf20a2261d1326

SHA512
8a1d6c0d688ef5b6188c3ebfa0ca6af0764b71bb69e36ae63e2c729dbc63e9cc1fb472576ed9c472c0b34e228f867473fe89450f160c5a405e68f455e520a7ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
99427f9f4cc736cd4391902ace8d276c

SHA1
91e21243a6beb4d2c8dc306094c564a7bb150bd8

SHA256
bdbf6e1056f2be626fe05fd977c4e2f1fefb01641b1bac5d0eb97fc9d965dc7a

SHA512
f64192675cfe522d65da678112c3546ba8e6964eee80e93480264a50db1d62fb095e72beddcfc1a4430a35c54f413036018083fd1e863d4e1fedb82fdeef2484

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
c2072e4837a6ac0176d8160ff9d44303

SHA1
ab8f458612c82d378b9579f94ff1b823c98a2851

SHA256
360f881869049236306196691b2f855f6455a6f9af1ec188be1a8bc9e853facb

SHA512
f00ae40e64ac1387fda0b277caaeee07b622a49c0f68e942ff082a995466a47487483d54d0dd801770a050f80eeda9b6b3dfe3a84c9ec6df264f71720b85fb6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
0526920733e7ab618e20a9c56711c14f

SHA1
d6d2d446914414f5243d8140abe6d6ad600006ae

SHA256
dd35a9fdb4ce09a03e2cfc0db1d3eac72a9d20bd7b78f3a6e26cf83db50ffb40

SHA512
a8b9abc532800a2dd9f14dd3fe56ec1ce797e05d777d28cfe1681ce2bb1e8465521ab2b5140e116798c9d8f1f57d98527a7ede850a3a66af525cbee6aa608646

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6db16f3a023167ee359769fae1207752

SHA1
ccac91d6ad5874ebcb165e8eb06af91297f4b73b

SHA256
d530f6226a2667150b17f3a56258b897f5aae646360669c2778a295bd98b1c15

SHA512
fcb55802b918cc933f0661c62a702ae727fdf9ba6aad5125b6cd697aef563b25a1f3baa50e32f40bc398eb8ecaca880d50cca3dd2d932fd34b011e6d4a373520

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
646cfd3cdfddb8f96d1ac80aac054fbf

SHA1
ea3c77e078412b601a2defbfab5a2243ef291376

SHA256
6a0a29f9f92db100477db64baf538637e4e0108b64005c47cca2ae7b7e2c57fd

SHA512
d085c957a8a81a3f27b2bc73b64c90fd13c7a0bca5598afc823cb5c2604385562335d7f84110f497cc5c8a4efd3c3b2262569262d0962095d9ae2142a5ffa145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
bc3ae4afb22847c5b5ccc22696912791

SHA1
38cc5493204e527bd99d94632270c8a21437fae6

SHA256
1d3d085489cecdf6a851e1f5234a67387547a2b68d87b206bea20db0a7707ddf

SHA512
56593bc5b4a74d42aa62d72bce706b892062b41b7fb16a59a68219a57066c5603043d12efa44fb06f69ce1462960f9332eb3e5d7d5719aa38a8055d316dfb962

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
52ccbd6ddb36ac727973be1ed81b8cc7

SHA1
64ae8d7b397e51f113b8c844ecf6998ed73eea5a

SHA256
60b9e70cc5dfa9b590f97358b2c182886594d570b98a20786a06461a5d8237c7

SHA512
fd06fef681230d5399e093584eed918ea18a5901a18ea043b91de6b55e71623e53ba4a83b15e60330e6de378c8c689d57ed841dfc6e7b80aadf3f4188c27b154

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
3658f8e1bc67750a66413788dc93d122

SHA1
ac339e0ca767a29cb944b09ae804c4dc55bc564d

SHA256
833d67ebfd4bf6f0028d4454ddc8d434971d7ada93a9764b8c3ef7c2cef4f98d

SHA512
92d3c093e7c727058608a69c2d7384803152e67f890c8be2e3efcc9f23cd5389049cfa5924880f3b887a0af6785ada4b6a3df902a5759038eb6cce44c64a85b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
c296522121d29fe36a60ea8e7606c0c3

SHA1
53c6cbb0edc91fd9e64a6935ceef15fc14a280c9

SHA256
f995bd208817e433b0b8ae51620f5991009a842e542ce8308a2798b5ccb257e3

SHA512
b7b80f5d5553d25bdcf7f1f8a97ef90d21e23e4f423760b07213d7a47f92ef631b0a8ba10b7a37f3437c6ba651d759c9ac8634f3f4de806f10c8e0602d3fc5b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
b9608555f970e0fb94eba7371269b256

SHA1
1cd625750d7c86b4f053f0244f793219c75d0b06

SHA256
73b33392d1f6881ad40aef903adca1bdbdb32ceae3f28763a2c23c9d77ba0bab

SHA512
40dac8294c8038ffd45070ee6a83324dcecbb3ff6d9a6ade1760c73b0be2af1982678f44cd0cdfa1fc7fee2d0b1f85ff6ced677765748660bf198b912d99ad98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
3ee102306725702b84c6169db6f76b96

SHA1
87e3578ef700c3e234fb2309b1a5d14f9fc756b0

SHA256
c6dbeadb3157f08130982e4451df4705d40a7716c33f296c3e46c18b3b2d1112

SHA512
8d5f01c639a20fa6748e053b8a8be2a6b685741f77da20ba7e02803b0c8a4bc6fd2d1ab59e2f3bff9f471c83104df5a71fe8db4edd034dfd54c67663ba0b7132

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
40f7ce0764ca6db87b9a35d9991e2a2a

SHA1
a104ec1582bfb225ea6e2a7d91a3ac7c1a2b0e3d

SHA256
febe3a656d4c323ba47cd3f485c62913112ddbc4ba02d039e59cdb2643883b9f

SHA512
3273f66c75130148570a4925ef0f8b1742ff70b3260ada35910e2d79da35fd33044e867c5981394adb50f1e0d0fef8af220ad5b282a0042d8ac10a191c19929a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
35B

MD5
343859b4ad03856a60d076c8cd8f22c3

SHA1
7954a27de3329b4c5eefd4bdcb8450823881aad6

SHA256
8c79b653c087618aa7395d5e75198da7d3b04c08654c39e56b1027f9ef269c2f

SHA512
58014a4e7f2b4b0d446fae3570196b8fb95d0d1b70bdab0dd34a74d6c62cd8d7ca494a486f19c1a829988a3af83a08d401f18d1769ce1799a02ee09807234254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt~RFe628a39.TMP

Filesize
99B

MD5
0eab1291ca994afaf7445a4dfd43cd6b

SHA1
e1212bfecbe4e0a68ee3f66a4b41027bb434a548

SHA256
2e296ad8fd9d2ec88630b456893f955e472cb1630ca331888d135d4d27b8eadb

SHA512
0afd7c4dd1b5eddbf4a62ff4be760f5d958fc11960fb32ec3c30245c16068c56f1520d5b717af1a52c988194c99b976d99a793f427a1e8b8809abdcba2b6a711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5ef449fa098ca1876f9da8d664dc8d70c50a359e\228b14bf-4b5e-45a8-bb57-4b6e71c7e20a\index-dir\the-real-index

Filesize
72B

MD5
b735ac87b1c5e16a3bd7be44ddd4edbc

SHA1
19ce8ab59b209e414edcb5c56188978983fe1ca3

SHA256
30f46b70b79d0b1f828a133fa15f748e6455862ea481d5bfeed538ff018a5aa0

SHA512
9e0569f86037b3bc11abb1b8c222a772d76e618fadfda4d2e2cc93f55cbf1292b36076549dcb7905fb4a17664cacc446cd3019d1bcde0755766576f779d9abe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5ef449fa098ca1876f9da8d664dc8d70c50a359e\228b14bf-4b5e-45a8-bb57-4b6e71c7e20a\index-dir\the-real-index~RFe587c20.TMP

Filesize
48B

MD5
c6b83372696a407f249489f716641626

SHA1
76936c45693ee5067301699433c45e3d22df5be2

SHA256
54e6be58abaf39f51daf83d0ab465710f0f311b52d737efe6c3ce92c838ca2a7

SHA512
1f44f07699bf68d17fa73d3a3fe54dbf8e81a9f20bbafb28eaef02c1794ef982798bfeb31918ecd1e8b621e83096949fb67504f533469ef6719cd8027bc269bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5ef449fa098ca1876f9da8d664dc8d70c50a359e\index.txt

Filesize
136B

MD5
98472b0f891f0dc23756902722c85340

SHA1
b1fda8797624f7f9d6aacb0be2bc6f7253279273

SHA256
1187ac6462cbb1cae900485d5c1e1cd2218431fca0e5ccdaccac9ebc3f46d099

SHA512
38e175ab4ced607ec83406e5f0e4d928f439deee74bb5c378a795335010257707a4181382977229b114bceaec0b55a211ec2e1ab37d28e30e09a76de611dffd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5ef449fa098ca1876f9da8d664dc8d70c50a359e\index.txt

Filesize
132B

MD5
7526cfbacaefae7ac96a032810af2f51

SHA1
c67d00fd5fa1f6d1809d26c260faaf29ef24892d

SHA256
38761ae935cd71569eb55cba46b7e2490d14a1959a0dac1fd196ffeecd89f0b1

SHA512
597cdc064dfe2355839c45d42660b33135986141ca7b9c40868d9496e5957a6152dcb7a0f353c973a20c40b1e45e68472d352ca89e6bab7fe0e413d775b34ae7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\d18c44ae-b34f-48d9-9fa1-1913afad1521\index-dir\the-real-index

Filesize
72B

MD5
6b6c2804064d37bbd7be8aa602805ae6

SHA1
eb6721cd3c4742236da0f999198976e0ac2b0ca4

SHA256
81a8208de59760a602635aa059fe43bc5b72255cb1edd20c57e0a0d6e353dfa4

SHA512
0b859ab58a95353912e67ac6213b31fec9358ba3df07905946c209a4d77959703bde07ac1c1d923103fd94f5e82e8b060ada9a2acf848e4cf0902e9dcb2a8e0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\d18c44ae-b34f-48d9-9fa1-1913afad1521\index-dir\the-real-index~RFe5835a1.TMP

Filesize
48B

MD5
d165173aa549a02d64e43f3a4cdf69e0

SHA1
61361223378e1da78ae34c73698467f5b295a01c

SHA256
d38095f4a8f8b0d98aaccdd832f31bd790b9344dccb50376edc0686f3b368c84

SHA512
7b04cdad5a2c93b0d62d3f8957774e06feb0ffc8c0cad1d7fae233f7781f8f83321fd5550a25e57a889c0f738b650e204467b6dbabbea08f20c5ee464676aaa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\index.txt

Filesize
101B

MD5
adb8954d54cfc00e3d6207f84045445d

SHA1
2f7f351e2bfff392c64c717912cbadb5bdde740b

SHA256
c68a22c74de39bb3c9e64d6707560239c07c5c4a9443a48d2a55e0a48761214c

SHA512
3750abd86356c3a69e95e54c6d656922e15f19b9af7b29b5f62d2c70cf1353e785a690b398f99059636b977cd2916d7a774028e3459f39d68dba5cc210bbecf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\index.txt

Filesize
96B

MD5
62da8604d01d90d620081eec7339f595

SHA1
dec60288c534c29e7e02f274503caac9feeadffe

SHA256
eb47136e7553ffca886ba4d78deccddcbfd363f22bf4160d26010d75e5c6e488

SHA512
e245d5cf336db45ad44980740c10c5d0096e2a5a7dc61988849278e1c02ab31c5993b279308d83b6fe5966c4c66185690343baf4c232e1acee4ae6e4ab10810a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
120B

MD5
d37f71e5207221ea318f9428471be89f

SHA1
de51c831d6083a3205e93eac8c1e808cc6202304

SHA256
b37c3d07e9ae926e349c047e436e79ddac2a79624cf1043f0444112c65bb4b0f

SHA512
0240ef080aa36f9eea2f600e17da6de9f16781b5f47bdda1dcaf69377105bfe4fa58daa96bcece49a47a59e46181f0b072682434aabbb403f966d96ac1e27cd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585ca2.TMP

Filesize
48B

MD5
3487da79537565e1de8ba5d3afcce1cc

SHA1
cfb1349f77ad0fb0c77b15fb9e835ffd0e2ae083

SHA256
4a1eeefb2d3d661e55a9d21f57fc3302c649ee5aefe872cdc04118f5007fbbac

SHA512
c0d9f2a12dbe708362f435e6b7090a76ced72c550ab37230a6bb418c400f17e287c554991804f441b3b3d424c8af7e02f8c11047a52a86b776b44c369a5fe0d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
d1403b4c9467e1a757ff1ae6ffe7b02c

SHA1
6932b9dd29e6424292669ecbd0e4a285a9b628af

SHA256
a19bdf6f48382495c787680821ad6ec25828aa0aba667e2e27780a87443f2e15

SHA512
63177ec4c7817a01c1a0c989342524585b95bf5e0a5a5e21aa215cd9b0d2093d0694f083578ba07ca734ed96616ce7ce050563d9ab5b3f31745269e4d91078ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
30b03f84a00fcf04b232af672cb1a8c3

SHA1
f38fc64c4ca4b430efbe03c9b19cc255e479794f

SHA256
d010f5873e96df4ad235ccc0842106ddd1c38f29afa4ce0165f32ad18bbe4fa1

SHA512
e53405ac51879d0f40d9ea506bcd5e9d10b8ce9a1a58c970c909921282b4cd68f8b180634295233265562831aed4127e4bc50e697890c9937d11603f75554e27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
fd43eeee204c97922f6044c7420bd039

SHA1
7d4f327ff61c91f1e297e0d67c30e79a973be72e

SHA256
f42864c57a47c17c2b10bc672b11d369bd0ca00466df49b8121219c4d6fbf2a7

SHA512
343496d3b2337df7987e4ca108e78d65d012f9e738e6a2d06d451c9207c5b18123659b859fc09fb399cde15a69b98ab804b9cfe5f4b476b41fc072a8d59b1f6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
0b0060149ece9df469dd7474bb453d55

SHA1
4f772e56dc8acc824089f5c08a3afe844fce8236

SHA256
704d9bd865a2f9390fca7f5058e647021a1ad8fae279e8075bf717195af8c377

SHA512
1a48615f4be51f4cbfc3559ac334a6429de0dcbc579749a72e183a703d652e2c2034f21d65ab74312cf135ecefcf3305a7699f87d07515ae834ebd0222f601d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
867B

MD5
7dd54f59706e07225574bc6a5593fff7

SHA1
e8b28cfb0ec3a76cbc9c04b86649443adaff3721

SHA256
57557cca2689d62e8c9f648bf8a82e1bf86664d999d4d45b2eabac511dfee56a

SHA512
caf2c92604c1ff39c081442adb02757de7419765dbf5701bf76fe4ebc7ac2264269bdb2f110635e42c279c6abf6036b312f4e651389f8a17b6dda4e74c9a1714

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
a0e780d363d988746e460ea5188d1c84

SHA1
f91168009c86f114b0e7126cc310937e2fc17761

SHA256
0b11f510fddb2178f381c505935546c741f11593f2c25c6cfd0d44a440bbedf0

SHA512
151e3698f614763c402f5a92b6cd50a4d6a19c8144bd343b9523090c13dbefaf73e32b2e7571974366e603e0e4c206bbe2f7147a0ecf793b8a663783fea97c7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
afbad14277fc5cf76867d5b5c97cacf9

SHA1
22c99cbf0bf244a8c9f7d53758e0901e1bd767cc

SHA256
60dbf38ac54a7d625616361b270c88831b40a34aa8db090363d3c9666ff4330b

SHA512
c6630ecf576b0c2a40e1476d579a087c983d332138aaa793e24fd325aeed70ed84f4df74c13e7b5888bda9c8437311e0bab261f40259ab3a0902c01177ab5db0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
524ff05f23b4a7d5274de69602f6dd03

SHA1
a245affa0335513eb064b4acbee87bfad5fb6c7f

SHA256
e9eb9ac1a137c8c1a09f4e18f8926a00f3a6fa617ce569fee55cf76c30c40105

SHA512
c472041f4a8805bf4ceac7bfd1d39ab7114e02beee27185ed65568d16469c4d4397cdc88d6862cd3b60c076d1f4847f5c50de2b0b3852847c439d66eb284c541

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
b7a5efe7d3a693606162d6e73ceb3712

SHA1
b62ca1ed30b087f31ad4706c5080e472feeeea61

SHA256
ff03c48dfe9e70e93c566d9dffe3b052b38ae0023ae5c0bbd52d2db17d1b0402

SHA512
56d0c6abc6eed67868cbf34e512b87b3ea2c0f650eaeddc27024f787ad8e79cbc965958afc041bdba6f035b0ccad3b98ea035bfac59be56d06eb070f598f0448

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
12f7ab3123df2c32b3d8cc4354a73c2c

SHA1
e339b03a55057f370395975d340c73df0bff083c

SHA256
59820d1c265e0c69c4d9a672de874b03c861495c6b4de811357458bf5194e3cc

SHA512
e2d1cbe03ec14f06820c40a4022c77639ba27fd7aed6918e03c49aeb92f4bf209e8fe0a5bf8d9ddbaa85b1b781202e093a894bc4380bc1297169f51ad30ea700

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
2965af407e609b89971209e1bca03d43

SHA1
ef729be4990a4ced8fc11937fec40fcf03ae3ef8

SHA256
1542125701d05880249554a40298c89bfec8c2cc61aa5fe1c8ccfab69f59448d

SHA512
9fb790ad1884f84c4dd68bed7dbda2e0ddbdacc34f8fdc80a6275d2ae6dde591c40eac8487324f33f4fd3585f6a85fc6bb2097dc4f479f1744c47efc5856b967

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
c3ea075a585f36fab89d44d6434d0180

SHA1
8668fd55e35a548a5dde5ad1419d63d04a51703d

SHA256
1c2fa4cd015978f7b0caac9aa6371831eba44ae213c77e208e4ad19fa337a349

SHA512
cf628fbbeb3da92d079e038730d810ac2cdaff1476d5b1737a448cd0b47a53b248814e0e3c2edaea0ad2d164c313a2e756bd6080a50a553bcf5116a4ce9f7f06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
2f8073109e4b06f7a0e49935f530898c

SHA1
b049791ef8a23b188159148a6cc4624fce0ab44c

SHA256
5d5be51e2c82703efdb2e1232ec7cc1d8f27c6ffca69914942b2a9bc97208d4e

SHA512
87d49e10e11b61c3b3a8ccd101b9c7c7abfb2f8867b2ad5945052c402f64e8458b2806da92daf068f1d78f29bd3132fafe8f3d6881a0c96707af9d28648c7b71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
45115877fa4624f22b776ee9964d0bfa

SHA1
6dc5d5418db616baaac0c4dd6f17be9abf818874

SHA256
b9547efac65be7a15b5d1e3b9dfd796cf49142fc7b54e2ec1324726de2b04750

SHA512
77650af862c4cfeca247f2fe777fd2ecca1c4254fc59797771f9498ed849aa5fe9358b240a8ffd1f3fd722f46e1260f06757660aaa35def4e39b444c6b037d17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
2e3bbc0869b49b9232b8923e33b038ae

SHA1
f55298c90ceab371d88d5e9c8f5e3ed148a66088

SHA256
a5184992c4ae18bd5e95eaf51356eca3c9aecae91c5cbd60fbaa27924e75ba33

SHA512
f062b0bc93c449959ecb0be562924e699db69c7ea7e2b55e414ec6e07c86ce070d114e884fdb7d1f68906883dbe18b872b848bee025999345912b376cf925c4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
38d3dfb51c3548860f02314a8a3f489a

SHA1
8880c577c5229a1c10e3a94be91dc12ecaa2583f

SHA256
4251c71c77276acd6d97ff4d6bc9dad394296df97ac36e60037876c814e3c659

SHA512
1aacaf9765de74f957e3f237ecc1e43bdaca02cf7af2efebe1f7be5a7ee312c8926195729fa29235be3c049507f9264770ce3d87d5ceac3a84b835205b12aa46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
fd230528bcfd13d853cd7272e79c2403

SHA1
26f3687f7e4792e22f28e7e6290c0ef228498a67

SHA256
c4161c6486b35c85e62cfc4fc2e21e636fb71b4f611cd5368a5387b9530e6da8

SHA512
f9a26b443c9c108c924f01f604edbf87043c450a2ce39d492803dd4909153238507dfa688eed2545db74d5eaf2494c11dc5e0bae0637754a17185d02aeab693b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
cab4c978ba7e6510095fb4f752500194

SHA1
45bbf02b7c015307913099908bf0b33a7cec9e11

SHA256
ee3c71a88b3cdabca96e91ed3ff30ab6377653cc29f99901abc260520961c4ac

SHA512
879d26445aecc16f4518ddb9101ee75e084982dc64e575fb5f8474a8b9114df76dab5304ccb4e763c3e34a1e0a5a95e272a9f0fb29bb88d15a334faccbc87c1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
b272507762fbab9ab8c06dbdcaafe669

SHA1
e89a3819296e533112e1c8c425b3fbe473241872

SHA256
942a355dc82ed1b6ebf7afb6d95be3bef3350c8da787091f0f15216babd3d485

SHA512
bb6ee36af1fe002ec36f54a3d7692610c88196b0f34bc5bed435abba77780a8de0360e4a5f444ede1667dd187afca67683b01de0118ea461fed0f96f3d815a9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
a4c3f7fe42671e1c13a11ef1c32d849c

SHA1
8c1f6313aa6425d55dbcdbae29609ae95fafe9ef

SHA256
d5a0ef04cd328ab709eef9c30b1e82d555ad2bcb23fc5c76fcf3d8561a53686a

SHA512
1ea891fc6264e724f809816d77098c9f06c113a2d8768fba3764cfc7eef20e3392f3fb358f07b817d720829cdcebb8263a3e0d541e4bf12981ac764aae73acb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
fef978162594256329a15fe5b7436d19

SHA1
59d4d78bfc38535d62fa77c6afac6ac463b7fea4

SHA256
80e0ba0dd770fe1bafbd0be5de8851bab923e12b5974f58db0b5716ce95e351b

SHA512
2388b0cb37861af53c241fba5869b08cbcd069dd69ffebb1527243a096189744a7f400854a8151b349f07ca3ce8cad454b473e4ab9cc1a41a2ee9f01226c70b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
af449e93c68743ba218c0069132d4217

SHA1
12d6dac0045130878581b2df2f90e2d2bd3ba544

SHA256
6fe0366f880ca5b12fb2a968c4b4011b5ffdcbbd70f06c20bde13152317cbf2c

SHA512
3d83c655db7f442a8f97676fae8e247204f11e9530ba17d82e0d3190097ed6a878afb78b50881dda5ff8aabc6f83142ce32c82f9ba05c22b6124034521d1235b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
5ed665c2eaabb96c990af7e299fe8e96

SHA1
613675b819e8b90b00425e7e7554e68ffb762456

SHA256
18fae3709f50eb6a1c3cc25d227a95ce0ab58514fb705ca4ad2f9b8b4f669141

SHA512
41170db7d89e1688a977be6e6bc8c19c9502cbf56ee728f2f76f3c4c3dc3c3a9a61277527a874623e9cb2c85baee830a83f2273c4c830c28b811e6c1c8409863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
7172ed906ada2a4659187c0de3a4958e

SHA1
427641d8935bcb0b3d9c5509601847c8b2054cf1

SHA256
ec23d7eb528f2fcccd7060a416950744af3b1ad1c67598be3ee2308234b38c8b

SHA512
2f79e0f892b779eee9e7a596e219f16718e4280e3696ba36a369475fcba3d02494a667164825fb7b501f05b44fdc3d57ca5aecbed6a866b1f43c8ed376ee6679

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
31f03446722391fed559cf29a075aa1e

SHA1
ad4419210cf5b5759bc32d7a547a6ec6041fb3ce

SHA256
bcc57617af45309690605981c96abc4798639ec3a98e0e8810b38706270551fa

SHA512
aa92b699865399c6dbe172f48679940fe1f646cedc6cbc5aa3d3aefb55274f950c603a4faa8306335c30f4cb9f8543e1b4929ec20bfa07e59d90ca64c9730cf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
479457fe7428f32b50bcccd6cbba73de

SHA1
a89cc37f7ef7ad8d1bf65726905ec904cef1c24c

SHA256
aa1f486ac623eebb7eee6b5f46d9986997f1a7066ac68995475950be79842b0c

SHA512
8f77018da7bdb41bae6e857ef025b44a4e767fbf3ec2405a7b6c3090308bbf8ec36f0d50d3e8c95346ee0e57ba0723e91d10369dcaed35c6d8690958f4e13f03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
11a434e59db435e8919d662cbbe397be

SHA1
4f300e4fb5fd1c7da06c6260b66491f5e0ee13d5

SHA256
ae8874b9e5d048898cda4b9629adc3fccf02918997b31c25c9fa28477a3372cd

SHA512
e42f6433e9d098f58d8a47dbe492839d831cf257b380832e05d1490c01ffadcf3a09a8f65f91ef6110e5bd05df6046d51e74e84c78feeb24d5209f0cbc900463

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
1165bc8a17576ac8d3b1294964087384

SHA1
751363556b2e0f2e1056c151c1780b216401420f

SHA256
b6fda0bd87938048ab22843a0602f6235e94b85c3c710ce85d5630fe0b8819e1

SHA512
8dac362029a81d183cbb9607d208863b4947dc63127b566b5c33ae29e6e9570ac736709ba53ef886d970f0adf15068d6da3ad40039b06b54d08d847fad099513

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
ed3f354d7eaeab0fb15b65650b4169cc

SHA1
8ffb50903f3b690926a4a2683487d8167df7dbc0

SHA256
82dad0aaa32cc48e3d235c615e144691d0dfbc2a552620e8eb401a349ac2a7a2

SHA512
66d51ab8bb39cc0443429744ec84db0dd04f8380e711dd2b87b850aa6ee353d3fd32ef60c5a07d37f8839e3a8a7681cd622c2defd47b9888da13645fdfd4e240

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000010

Filesize
16KB

MD5
8feb503d057a1dfc7121b0aa2c7cc10f

SHA1
0d25b47e8482de37b7f615205b8a45162e1049d4

SHA256
e816b1086f600fa2096189c847f34de90dabd33b899de28ce199682eaf17c713

SHA512
a193f820d8719a47d6f52ff9ff2bf76c27ea3611e87a582543c8a55595af25cb3d1bb00913f8c2a4f2ed027ea2749717faf84d75e887f32610dce4d6ce105595

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000016

Filesize
17KB

MD5
fc97b88a7ce0b008366cd0260b0321dc

SHA1
4eae02aecb04fa15f0bb62036151fa016e64f7a9

SHA256
6388415a307a208b0a43b817ccd9e5fcdda9b6939ecd20ef4c0eda1aa3a0e49e

SHA512
889a0db0eb5ad4de4279b620783964bfda8edc6b137059d1ec1da9282716fe930f8c4ebfadea7cd5247a997f8d4d2990f7b972a17106de491365e3c2d2138175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001a

Filesize
16KB

MD5
916657b1904462de4fd9ddda8acf9d97

SHA1
ee32edf403ae7732a39154d925f20b96f28f24ab

SHA256
6220d4d16f2dc838ae215035cb67b832fda74852f0b4e52195a2a29cde0f9977

SHA512
a4c1d241ecd7b64edec45f27963e35ea809f9f75d8ba9c0a7b5558f890fb7ee0305a8a827697fed58ff993804b3ece3e5e5a80b6b24ed3a38cd195f26c031a73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
20c09f3137c4b864768d0e5ca3a7cb1d

SHA1
1f6318a767fc688c1cb83b45a3e6b4ccdcc764c6

SHA256
6f41d00809da8f5a6cea49f0161ec98aee4c594be474aed4c80ed2e25af3f378

SHA512
3fa68d7c5e82b78e9c807f00ec794e7e9209b4d59e24fae952e26fa4a3cbd50d2f453b9fef28e38b56146c673c7855cd3b3ef0f4bf3699abac1d0c598b70a6bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
54ac9b0c8784da7cd7bb301685f62f6f

SHA1
c9180a6274972a14dd6481953895a217a116bfcc

SHA256
2664d0faa6635bbeb9fd487128812ef90ebb564eab06a965db3c696a4d86eb70

SHA512
bb0f4709e08872e656fb90da069314d0052cf8edd85003d06f036599ade16fd1ab17a9e96926a554fcf1945f297a28dadee1b4fe6cec8335c5255dfc05d5e010

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8a6b78d672b6a1e0c9c18d4958f35683

SHA1
490776775e94e1a63ddbf237d51bdeda847067ae

SHA256
928248577681f836a9ececd2a53c6ccb861354275ebb2b69e9431cdf3f6195bf

SHA512
c5744957b177dd230e199f19083d570602f94f9ad2019fc500886fc042338f4e4cce16603226615241f377643ebb031214521aae8000d8b4615f8d38d1ae7e58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6915681fee98f96cede1759e74407ebd

SHA1
7922971e2b3ecb77b92dd0edbf5b194568fa1c84

SHA256
2befac7100c5961ebf3ff03c1e3c5eeda2136987968636aa29f4a9a119ba3cd5

SHA512
2feb201f3b9805a31434e753cafd17d80b9d0664cd5bcc00b96979be47f761086bb6f2aba5028ffcd11ec3037f13e829cff12fb0fc680280b76cca472adde3a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
664ecace141a9deeb36e69ee314228ac

SHA1
b20fda5729d62ce217dfa2472e66792392589f41

SHA256
34324480b350cc6a0a5ac45a8bd87c153fed9eb971646c5891cf43af461bd528

SHA512
02e79304c45e9432c675834016421c8aa8fe2688f22d461e8ae60363fa44f4439b8ecbcc1aca33108572fddfa9a77496293034acac62d83f7e766738947748af

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp

Filesize
8.0MB

MD5
8e15b605349e149d4385675afff04ebf

SHA1
f346a886dd4cb0fbbd2dff1a43d9dfde7fce348b

SHA256
803f930cdd94198bdd2e9a51aa962cc864748067373f11b2e9215404bd662cee

SHA512
8bf957ef72465fe103dbf83411df9082433eead022f0beccab59c9e406bbd1e4edb701fd0bc91f195312943ad1890fee34b4e734578298bb60bb81ed6fa9a46d

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp

Filesize
8.0MB

MD5
596cb5d019dec2c57cda897287895614

SHA1
6b12ea8427fdbee9a510160ff77d5e9d6fa99dfa

SHA256
e1c89d9348aea185b0b0e80263c9e0bf14aa462294a5d13009363140a88df3ff

SHA512
8f5fc432fd2fc75e2f84d4c7d21c23dd1f78475214c761418cf13b0e043ba1e0fc28df52afd9149332a2134fe5d54abc7e8676916100e10f374ef6cdecff7a20

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp

Filesize
8.0MB

MD5
7c8328586cdff4481b7f3d14659150ae

SHA1
b55ffa83c7d4323a08ea5fabf5e1c93666fead5c

SHA256
5eec15c6ed08995e4aaffa9beeeaf3d1d3a3d19f7f4890a63ddc5845930016cc

SHA512
aa4220217d3af263352f8b7d34bd8f27d3e2c219c673889bc759a019e3e77a313b0713fd7b88700d57913e2564d097e15ffc47e5cf8f4899ba0de75d215f661d

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0004.tmp

Filesize
8.0MB

MD5
4f398982d0c53a7b4d12ae83d5955cce

SHA1
09dc6b6b6290a3352bd39f16f2df3b03fb8a85dc

SHA256
fee4d861c7302f378e7ce58f4e2ead1f2143168b7ca50205952e032c451d68f2

SHA512
73d9f7c22cf2502654e9cd6cd5d749e85ea41ce49fd022378df1e9d07e36ae2dde81f0b9fc25210a9860032ecda64320ec0aaf431bcd6cefba286328efcfb913

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp

Filesize
8.0MB

MD5
94e0d650dcf3be9ab9ea5f8554bdcb9d

SHA1
21e38207f5dee33152e3a61e64b88d3c5066bf49

SHA256
026893ba15b76f01e12f3ef540686db8f52761dcaf0f91dcdc732c10e8f6da0e

SHA512
039ccf6979831f692ea3b5e3c5df532f16c5cf395731864345c28938003139a167689a4e1acef1f444db1fe7fd3023680d877f132e17bf9d7b275cfc5f673ac3

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp

Filesize
1.8MB

MD5
b3b7f6b0fb38fc4aa08f0559e42305a2

SHA1
a66542f84ece3b2481c43cd4c08484dc32688eaf

SHA256
7fb63fca12ef039ad446482e3ce38abe79bdf8fc6987763fe337e63a1e29b30b

SHA512
0f4156f90e34a4c26e1314fc0c43367ad61d64c8d286e25629d56823d7466f413956962e2075756a4334914d47d69e20bb9b5a5b50c46eca4ef8173c27824e6c

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL

Filesize
73KB

MD5
81e5c8596a7e4e98117f5c5143293020

SHA1
45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081

SHA256
7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004

SHA512
05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL

Filesize
40KB

MD5
48c00a7493b28139cbf197ccc8d1f9ed

SHA1
a25243b06d4bb83f66b7cd738e79fccf9a02b33b

SHA256
905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7

SHA512
c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL

Filesize
160KB

MD5
237e13b95ab37d0141cf0bc585b8db94

SHA1
102c6164c21de1f3e0b7d487dd5dc4c5249e0994

SHA256
d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a

SHA512
9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL

Filesize
60KB

MD5
a334bbf5f5a19b3bdb5b7f1703363981

SHA1
6cb50b15c0e7d9401364c0fafeef65774f5d1a2c

SHA256
c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de

SHA512
1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL

Filesize
64KB

MD5
7c5aefb11e797129c9e90f279fbdf71b

SHA1
cb9d9cbfbebb5aed6810a4e424a295c27520576e

SHA256
394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed

SHA512
df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL

Filesize
60KB

MD5
4fbbaac42cf2ecb83543f262973d07c0

SHA1
ab1b302d7cce10443dfc14a2eba528a0431e1718

SHA256
6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5

SHA512
4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL

Filesize
36KB

MD5
b4ac608ebf5a8fdefa2d635e83b7c0e8

SHA1
d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9

SHA256
8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f

SHA512
2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

Filesize
60KB

MD5
9fafb9d0591f2be4c2a846f63d82d301

SHA1
1df97aa4f3722b6695eac457e207a76a6b7457be

SHA256
e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d

SHA512
ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE

Filesize
268KB

MD5
5c91bf20fe3594b81052d131db798575

SHA1
eab3a7a678528b5b2c60d65b61e475f1b2f45baa

SHA256
e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175

SHA512
face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL

Filesize
28KB

MD5
0cbf0f4c9e54d12d34cd1a772ba799e1

SHA1
40e55eb54394d17d2d11ca0089b84e97c19634a7

SHA256
6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1

SHA512
bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP

Filesize
8KB

MD5
466d35e6a22924dd846a043bc7dd94b8

SHA1
35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10

SHA256
e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801

SHA512
23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF

Filesize
2KB

MD5
e4a499b9e1fe33991dbcfb4e926c8821

SHA1
951d4750b05ea6a63951a7667566467d01cb2d42

SHA256
49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d

SHA512
a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB

Filesize
28KB

MD5
f1656b80eaae5e5201dcbfbcd3523691

SHA1
6f93d71c210eb59416e31f12e4cc6a0da48de85b

SHA256
3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2

SHA512
e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF

Filesize
7KB

MD5
b127d9187c6dbb1b948053c7c9a6811f

SHA1
b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9

SHA256
bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00

SHA512
88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL

Filesize
52KB

MD5
316999655fef30c52c3854751c663996

SHA1
a7862202c3b075bdeb91c5e04fe5ff71907dae59

SHA256
ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0

SHA512
5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll

Filesize
76KB

MD5
e7cd26405293ee866fefdd715fc8b5e5

SHA1
6326412d0ea86add8355c76f09dfc5e7942f9c11

SHA256
647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255

SHA512
1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll

Filesize
552KB

MD5
497fd4a8f5c4fcdaaac1f761a92a366a

SHA1
81617006e93f8a171b2c47581c1d67fac463dc93

SHA256
91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a

SHA512
73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL

Filesize
2KB

MD5
7210d5407a2d2f52e851604666403024

SHA1
242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9

SHA256
337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af

SHA512
1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL

Filesize
4KB

MD5
4be7661c89897eaa9b28dae290c3922f

SHA1
4c9d25195093fea7c139167f0c5a40e13f3000f2

SHA256
e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5

SHA512
2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf

Filesize
29KB

MD5
c3e8aeabd1b692a9a6c5246f8dcaa7c9

SHA1
4567ea5044a3cef9cb803210a70866d83535ed31

SHA256
38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e

SHA512
f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll

Filesize
1.2MB

MD5
ed98e67fa8cc190aad0757cd620e6b77

SHA1
0317b10cdb8ac080ba2919e2c04058f1b6f2f94d

SHA256
e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d

SHA512
ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp

Filesize
11KB

MD5
80d09149ca264c93e7d810aac6411d1d

SHA1
96e8ddc1d257097991f9cc9aaf38c77add3d6118

SHA256
382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42

SHA512
8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf

Filesize
2KB

MD5
0a250bb34cfa851e3dd1804251c93f25

SHA1
c10e47a593c37dbb7226f65ad490ff65d9c73a34

SHA256
85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae

SHA512
8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll

Filesize
40KB

MD5
1587bf2e99abeeae856f33bf98d3512e

SHA1
aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9

SHA256
c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0

SHA512
43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 740304.crdownload

Filesize
9.0MB

MD5
7254b8573cd0b01741e5507ac447a431

SHA1
5edd3218477369bbfa68977c0a1b43972984cbcd

SHA256
8edd027e85f1bc3144fb1036a45f0fc7e137e9b057dac2a9c1279fe386e77080

SHA512
8183f8e298199c774bc205facbc9cd179000c9687fa66e7294fc598918154aa4b26c904a6242d73440b011ec282fb5297195ac5ac0642bd60ee4468c4ece8449

Download Submit
C:\Users\Admin\Downloads\You-Are-An-Idiot-main.zip

Filesize
4.6MB

MD5
7cae6b379184f1cc5444ca2fc9a8ec75

SHA1
9a68fb4fed6c6f633275480ac481b7d24a1e60ad

SHA256
4b6edb96987da0a7714e705a7af8516ee7167c8a616eff6eb3ed9e54f6d02ee1

SHA512
fc81537d3fa0aa4fdc56ebcbc13bc43167cf1cd5424077c65292d7c86dd1e7aa11c44a5c78d8ca6fb31d942c034c1a9ee309aa8ee8a75a39dea0d3ed65790604

Download Submit
C:\Windows\msagent\chars\Bonzi.acs

Filesize
5.0MB

MD5
1fd2907e2c74c9a908e2af5f948006b5

SHA1
a390e9133bfd0d55ffda07d4714af538b6d50d3d

SHA256
f3d4425238b5f68b4d41ed5be271d2f4118a245baf808a62dc1a9e6e619b2f95

SHA512
8eede3e5e52209b8703706a3e3e63230ba01975348dcdc94ef87f91d7c833a505b177139683ca7a22d8082e72e961e823bc3ad1a84ab9c371f5111f530807171

Download Submit
C:\Windows\msagent\chars\Peedy.acs

Filesize
4.0MB

MD5
49654a47fadfd39414ddc654da7e3879

SHA1
9248c10cef8b54a1d8665dfc6067253b507b73ad

SHA256
b8112187525051bfade06cb678390d52c79555c960202cc5bbf5901fbc0853c5

SHA512
fa9cab60fadd13118bf8cb2005d186eb8fa43707cb983267a314116129371d1400b95d03fbf14dfdaba8266950a90224192e40555d910cf8a3afa4aaf4a8a32f

Download Submit
memory/2712-1482-0x00000000055B0000-0x00000000055BA000-memory.dmp

Filesize
40KB

Download
memory/2712-1480-0x0000000005B80000-0x0000000006124000-memory.dmp

Filesize
5.6MB

Download
memory/2712-1481-0x00000000055D0000-0x0000000005662000-memory.dmp

Filesize
584KB

Download
memory/2712-1479-0x0000000000BB0000-0x0000000000BBE000-memory.dmp

Filesize
56KB

Download
memory/3612-4546-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/4216-5-0x0000017E79040000-0x0000017E79069000-memory.dmp

Filesize
164KB

Download
memory/4216-4-0x0000017E791E0000-0x0000017E791E1000-memory.dmp

Filesize
4KB

Download
memory/4216-37-0x0000017E79040000-0x0000017E79069000-memory.dmp

Filesize
164KB

Download
memory/4260-1-0x0000000002B00000-0x0000000002B45000-memory.dmp

Filesize
276KB

Download
memory/4260-2-0x0000000002B70000-0x0000000002B71000-memory.dmp

Filesize
4KB

Download
memory/4260-3-0x0000000010000000-0x0000000010003000-memory.dmp

Filesize
12KB

Download
memory/4260-6-0x0000000002B00000-0x0000000002B45000-memory.dmp

Filesize
276KB

Download