Overview

overview

7

Static

static

3

66bddfcb52...in.zip

windows7-x64

1

66bddfcb52...in.zip

windows10-2004-x64

7

Resubmissions

21-01-2025 18:41

250121-xb31baxlem 10

21-01-2025 18:28

250121-w4chdsxjfp 10

14-01-2025 17:55

250114-whtvjsvlaz 10

14-01-2025 17:51

250114-wfg3zavkb1 10

14-01-2025 16:15

250114-tqfa1ssncw 10

13-01-2025 10:33

250113-mlhf9aymaz 10

11-01-2025 23:03

250111-21xbaatmgz 7

11-01-2025 22:53

250111-2vd8hswjdn 10

05-01-2025 19:04

250105-xqxrvavngm 10

05-01-2025 18:50

250105-xhbveaspat 10

Analysis

  • max time kernel
    638s
  • max time network
    643s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-01-2025 23:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    66bddfcb52736_vidar.bin.zip

  • Size

    187KB

  • MD5

    a284b21c1e928fe4ede4ddbeddfcd391

  • SHA1

    d5260a53b780a6308c639d2b89116ef5bbe992d7

  • SHA256

    8b34e6283a4e30009a0ad792723817cfb0d5cdbbbe119948aa6e887bd59e1620

  • SHA512

    64ee76b87be812c3c82c5716cd3d7c7065c0522fdbd774b1d745d67ab69a2299df3dd9d52e150188b860c9220435658fb3140f7317ad59a3fac76f864337203a

  • SSDEEP

    3072:6NaGrsZYYgA7AaNGNjF1kTWWdNYArOLE99nkVHr/8J9bykSEN2vvBhat0658GZqa:GSuYvfN+4TZNYAKLGaHb09q0eBIO658W

Score
7/10
discoveryupx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 64 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 11 IoCs
  • Probable phishing domain 1 TTPs 1 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 19 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 49 IoCs
  • Suspicious use of AdjustPrivilegeToken 21 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 29 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\66bddfcb52736_vidar.bin.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1840
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffb39a646f8,0x7ffb39a64708,0x7ffb39a64718
      2⤵
        PID:3260
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
        2⤵
          PID:2000
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:5076
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
          2⤵
            PID:2724
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
            2⤵
              PID:3960
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
              2⤵
                PID:4200
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4612 /prefetch:1
                2⤵
                  PID:4296
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1
                  2⤵
                    PID:4392
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3708 /prefetch:8
                    2⤵
                      PID:2864
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3708 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4480
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3704 /prefetch:1
                      2⤵
                        PID:864
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
                        2⤵
                          PID:1784
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
                          2⤵
                            PID:4512
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
                            2⤵
                              PID:1136
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
                              2⤵
                                PID:2560
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4548 /prefetch:1
                                2⤵
                                  PID:2180
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4600 /prefetch:1
                                  2⤵
                                    PID:4884
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
                                    2⤵
                                      PID:2468
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
                                      2⤵
                                        PID:3404
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
                                        2⤵
                                          PID:1492
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
                                          2⤵
                                            PID:3012
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
                                            2⤵
                                              PID:400
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
                                              2⤵
                                                PID:956
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
                                                2⤵
                                                  PID:3604
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2840 /prefetch:1
                                                  2⤵
                                                    PID:5216
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
                                                    2⤵
                                                      PID:5364
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
                                                      2⤵
                                                        PID:5444
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
                                                        2⤵
                                                          PID:5712
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
                                                          2⤵
                                                            PID:5808
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
                                                            2⤵
                                                              PID:5820
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2836 /prefetch:1
                                                              2⤵
                                                                PID:6128
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
                                                                2⤵
                                                                  PID:3888
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3704 /prefetch:1
                                                                  2⤵
                                                                    PID:776
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
                                                                    2⤵
                                                                      PID:5080
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
                                                                      2⤵
                                                                        PID:3336
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1
                                                                        2⤵
                                                                          PID:5772
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
                                                                          2⤵
                                                                            PID:6016
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7328 /prefetch:1
                                                                            2⤵
                                                                              PID:5812
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7520 /prefetch:1
                                                                              2⤵
                                                                                PID:5804
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1
                                                                                2⤵
                                                                                  PID:5576
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5140
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5524
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5128
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5292
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6720 /prefetch:8
                                                                                          2⤵
                                                                                            PID:3720
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5024
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
                                                                                              2⤵
                                                                                                PID:6020
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6600 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5728
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5596
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6608 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:2552
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7548 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:1544
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7184 /prefetch:8
                                                                                                        2⤵
                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                        PID:5036
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:6056
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:4300
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7208 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5448
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5608
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6828 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:4576
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,9080964992761072246,18415696200400224532,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1388 /prefetch:2
                                                                                                                  2⤵
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:5772
                                                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                1⤵
                                                                                                                  PID:5024
                                                                                                                • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                  1⤵
                                                                                                                    PID:3564
                                                                                                                  • C:\Windows\System32\rundll32.exe
                                                                                                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                    1⤵
                                                                                                                      PID:3704
                                                                                                                    • C:\Users\Admin\Downloads\snapshot_2025-01-06_23-25\release\x32\x32dbg.exe
                                                                                                                      "C:\Users\Admin\Downloads\snapshot_2025-01-06_23-25\release\x32\x32dbg.exe"
                                                                                                                      1⤵
                                                                                                                      • Loads dropped DLL
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • Modifies registry class
                                                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                      PID:4028
                                                                                                                      • C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe
                                                                                                                        "C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe"
                                                                                                                        2⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        PID:5600
                                                                                                                      • C:\Users\Admin\Desktop\66bddfcb52736_vidar_dump.exe
                                                                                                                        "C:\Users\Admin\Desktop\66bddfcb52736_vidar_dump.exe"
                                                                                                                        2⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        PID:5716
                                                                                                                      • C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe.out\scan_1736637102\process_1824\400000.RegAsm.exe
                                                                                                                        "C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe.out\scan_1736637102\process_1824\400000.RegAsm.exe"
                                                                                                                        2⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        PID:5936
                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
                                                                                                                      1⤵
                                                                                                                        PID:3676
                                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                                                        1⤵
                                                                                                                          PID:5772
                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                                                            2⤵
                                                                                                                            • Checks processor information in registry
                                                                                                                            • NTFS ADS
                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                            PID:5980
                                                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1968 -parentBuildID 20240401114208 -prefsHandle 1884 -prefMapHandle 1876 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffc882c1-0712-4205-9c5b-4baebf308fbc} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" gpu
                                                                                                                              3⤵
                                                                                                                                PID:3456
                                                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2384 -parentBuildID 20240401114208 -prefsHandle 2376 -prefMapHandle 2372 -prefsLen 23716 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {de2f9775-c860-4734-8e38-b0675f73daf9} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" socket
                                                                                                                                3⤵
                                                                                                                                  PID:3528
                                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3048 -childID 1 -isForBrowser -prefsHandle 3040 -prefMapHandle 3036 -prefsLen 23857 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b523ea82-ac25-42cd-8b42-b05697cf0fd9} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                  3⤵
                                                                                                                                    PID:5852
                                                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4340 -childID 2 -isForBrowser -prefsHandle 4332 -prefMapHandle 4328 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c96408ef-2bc2-45f4-8653-b0485c0accce} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                    3⤵
                                                                                                                                      PID:5452
                                                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5036 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 5028 -prefMapHandle 5024 -prefsLen 32279 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {73847aac-13dc-4fbe-a3db-b76a6a70b704} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" utility
                                                                                                                                      3⤵
                                                                                                                                      • Checks processor information in registry
                                                                                                                                      PID:6296
                                                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5416 -childID 3 -isForBrowser -prefsHandle 5388 -prefMapHandle 5384 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {82ca1522-4f8c-47dc-9266-5fba435112e4} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                      3⤵
                                                                                                                                        PID:6716
                                                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5488 -childID 4 -isForBrowser -prefsHandle 5540 -prefMapHandle 5548 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0b2eee9e-9e4a-4d92-9d29-a89298fe3a7e} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                        3⤵
                                                                                                                                          PID:6728
                                                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5696 -childID 5 -isForBrowser -prefsHandle 5704 -prefMapHandle 5708 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f299827-abd7-464b-a97d-9a3487ffe930} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                          3⤵
                                                                                                                                            PID:6740
                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6060 -childID 6 -isForBrowser -prefsHandle 6076 -prefMapHandle 6092 -prefsLen 31027 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a87f99a4-5ae2-4125-b15f-e30d2657bff7} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                            3⤵
                                                                                                                                              PID:6228
                                                                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3384 -childID 7 -isForBrowser -prefsHandle 6304 -prefMapHandle 6344 -prefsLen 31027 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a17e746f-2704-4264-bb63-b865826b3f4b} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                              3⤵
                                                                                                                                                PID:3872
                                                                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4840 -childID 8 -isForBrowser -prefsHandle 6092 -prefMapHandle 5480 -prefsLen 31027 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5c38969e-afdf-4f4b-adec-8d0de594c876} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                                3⤵
                                                                                                                                                  PID:1908
                                                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7072 -childID 9 -isForBrowser -prefsHandle 7036 -prefMapHandle 7104 -prefsLen 31123 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {89753397-ce8b-4ef2-858d-f75c8d087031} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                                  3⤵
                                                                                                                                                    PID:7116
                                                                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5156 -childID 10 -isForBrowser -prefsHandle 1444 -prefMapHandle 6252 -prefsLen 31123 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {581d2f18-04d6-4af8-9662-36ba6fcfeb7b} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                                    3⤵
                                                                                                                                                      PID:4856
                                                                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7144 -childID 11 -isForBrowser -prefsHandle 4296 -prefMapHandle 6380 -prefsLen 31123 -prefMapSize 244658 -jsInitHandle 1268 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4140b1a0-34f0-49c7-b57b-507dbec6d2a7} 5980 "\\.\pipe\gecko-crash-server-pipe.5980" tab
                                                                                                                                                      3⤵
                                                                                                                                                        PID:5768
                                                                                                                                                  • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                    "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:1620
                                                                                                                                                    • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                      "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                      2⤵
                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                      PID:1128
                                                                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                        3⤵
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:6556
                                                                                                                                                  • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                    "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:4848
                                                                                                                                                    • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                      "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                      2⤵
                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                      PID:6136
                                                                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                        3⤵
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:6980
                                                                                                                                                  • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                    "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:7032
                                                                                                                                                    • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                      "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                      2⤵
                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                      PID:1128
                                                                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                        3⤵
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:2628
                                                                                                                                                  • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                    "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:5760
                                                                                                                                                    • C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe
                                                                                                                                                      "C:\Users\Admin\Downloads\fakenet3.3\fakenet3.3\fakenet.exe"
                                                                                                                                                      2⤵
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                      PID:6992
                                                                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                        3⤵
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:7052
                                                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                    PID:5636
                                                                                                                                                    • C:\Users\Admin\Desktop\mal_unpack.exe
                                                                                                                                                      "C:\Users\Admin\Desktop\mal_unpack.exe" /exe .\66bddfcb52736_vidar.exe /timeout 1000
                                                                                                                                                      2⤵
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                      PID:6680
                                                                                                                                                      • C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe
                                                                                                                                                        .\66bddfcb52736_vidar.exe
                                                                                                                                                        3⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • Suspicious use of SetThreadContext
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:7092
                                                                                                                                                        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
                                                                                                                                                          "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
                                                                                                                                                          4⤵
                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                          PID:1824

                                                                                                                                                  Network

                                                                                                                                                  MITRE ATT&CK Enterprise v15

                                                                                                                                                  Replay Monitor

                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                  Downloads

                                                                                                                                                  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7
                                                                                                                                                    Filesize

                                                                                                                                                    1KB

                                                                                                                                                    MD5

                                                                                                                                                    c6150925cfea5941ddc7ff2a0a506692

                                                                                                                                                    SHA1

                                                                                                                                                    9e99a48a9960b14926bb7f3b02e22da2b0ab7280

                                                                                                                                                    SHA256

                                                                                                                                                    28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996

                                                                                                                                                    SHA512

                                                                                                                                                    b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                    Filesize

                                                                                                                                                    152B

                                                                                                                                                    MD5

                                                                                                                                                    b8880802fc2bb880a7a869faa01315b0

                                                                                                                                                    SHA1

                                                                                                                                                    51d1a3fa2c272f094515675d82150bfce08ee8d3

                                                                                                                                                    SHA256

                                                                                                                                                    467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

                                                                                                                                                    SHA512

                                                                                                                                                    e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                    Filesize

                                                                                                                                                    152B

                                                                                                                                                    MD5

                                                                                                                                                    ba6ef346187b40694d493da98d5da979

                                                                                                                                                    SHA1

                                                                                                                                                    643c15bec043f8673943885199bb06cd1652ee37

                                                                                                                                                    SHA256

                                                                                                                                                    d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

                                                                                                                                                    SHA512

                                                                                                                                                    2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
                                                                                                                                                    Filesize

                                                                                                                                                    67KB

                                                                                                                                                    MD5

                                                                                                                                                    69df804d05f8b29a88278b7d582dd279

                                                                                                                                                    SHA1

                                                                                                                                                    d9560905612cf656d5dd0e741172fb4cd9c60688

                                                                                                                                                    SHA256

                                                                                                                                                    b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

                                                                                                                                                    SHA512

                                                                                                                                                    0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
                                                                                                                                                    Filesize

                                                                                                                                                    64KB

                                                                                                                                                    MD5

                                                                                                                                                    d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                                    SHA1

                                                                                                                                                    ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                                    SHA256

                                                                                                                                                    34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                                    SHA512

                                                                                                                                                    2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
                                                                                                                                                    Filesize

                                                                                                                                                    65KB

                                                                                                                                                    MD5

                                                                                                                                                    56d57bc655526551f217536f19195495

                                                                                                                                                    SHA1

                                                                                                                                                    28b430886d1220855a805d78dc5d6414aeee6995

                                                                                                                                                    SHA256

                                                                                                                                                    f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

                                                                                                                                                    SHA512

                                                                                                                                                    7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
                                                                                                                                                    Filesize

                                                                                                                                                    19KB

                                                                                                                                                    MD5

                                                                                                                                                    2e86a72f4e82614cd4842950d2e0a716

                                                                                                                                                    SHA1

                                                                                                                                                    d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                                                    SHA256

                                                                                                                                                    c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                                                    SHA512

                                                                                                                                                    7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
                                                                                                                                                    Filesize

                                                                                                                                                    65KB

                                                                                                                                                    MD5

                                                                                                                                                    2c2ea9cfcd1b7831754c4d70892901c4

                                                                                                                                                    SHA1

                                                                                                                                                    c179c5a26e5ad12ff5656dfeee0631a119d83ec4

                                                                                                                                                    SHA256

                                                                                                                                                    aadd75136ce4d127af80f7a1979e2c76cada95cdd10817f1b1e40e9bd98b8c80

                                                                                                                                                    SHA512

                                                                                                                                                    f0eb51a828fb6e281f8152502f58b12df6e9d77c1d1e0ab6883358d7b69ce2850529543d4af150f9b36498438acef12b556550c5fe94d54f5f31fda195c8ec2a

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
                                                                                                                                                    Filesize

                                                                                                                                                    95KB

                                                                                                                                                    MD5

                                                                                                                                                    06a863615fd1074e2466d98e80033bd5

                                                                                                                                                    SHA1

                                                                                                                                                    19a022ffa381f01262c58aa183fe7be2d9af25a8

                                                                                                                                                    SHA256

                                                                                                                                                    6855213ff419361ee06b00400b1a26f5a2ccbd5f138ff8e03c1370d4c03d3ed4

                                                                                                                                                    SHA512

                                                                                                                                                    c0d4f1c4a4771fb04d1edda65fa508f1bc7a9afc7bc3865b0fcd5207a918508018a06b044b245ee9bd3bfdab3d058f8c5fe17f780f0b431663d3162fb517429c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
                                                                                                                                                    Filesize

                                                                                                                                                    19KB

                                                                                                                                                    MD5

                                                                                                                                                    16ea2a01894c38666bc185757b4f1b74

                                                                                                                                                    SHA1

                                                                                                                                                    435bb15c8de2e0ef76512618ab291da1b40776a4

                                                                                                                                                    SHA256

                                                                                                                                                    16e88923203a6b50f5a1b4c2c52001720833d07f7f0b1ce1510d42d66c40db11

                                                                                                                                                    SHA512

                                                                                                                                                    e333308b517a4c647cbb36b429224390a5c1afcaedaba81a7c8d68d88bc48c60a348af07956dbf3de8c7bada355e27128ce10ba3a0aa764bd6d807dd531025d0

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
                                                                                                                                                    Filesize

                                                                                                                                                    53KB

                                                                                                                                                    MD5

                                                                                                                                                    0abb30bbc90e848384e35ed2cf2d889b

                                                                                                                                                    SHA1

                                                                                                                                                    1630905788f6d1d4e3dda8bd4b045b8ca9a00cbe

                                                                                                                                                    SHA256

                                                                                                                                                    8852e6e03c6e9b50b61ff978c7368363ca692738b13d88e45a59760520ff736d

                                                                                                                                                    SHA512

                                                                                                                                                    c7887280a8a8613c2feef3da459235b48948b6fbb12ac72dccb79b74819dd4005db992d8fd6cfb292002df28be2adac372bcff18b39bbb7cdd1809dd2224f939

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
                                                                                                                                                    Filesize

                                                                                                                                                    20KB

                                                                                                                                                    MD5

                                                                                                                                                    87e8230a9ca3f0c5ccfa56f70276e2f2

                                                                                                                                                    SHA1

                                                                                                                                                    eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                                                                                                                                    SHA256

                                                                                                                                                    e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                                                                                                                                    SHA512

                                                                                                                                                    37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
                                                                                                                                                    Filesize

                                                                                                                                                    19KB

                                                                                                                                                    MD5

                                                                                                                                                    66d70cb2319131b318f3b4c7675bd2de

                                                                                                                                                    SHA1

                                                                                                                                                    9622989fffcc914a4d709d95dfd4ae66130f1c9a

                                                                                                                                                    SHA256

                                                                                                                                                    cc735e75d4ca0a6f9116e31dbe1b9071b4fcb04b38ef264611f2b1497c194cda

                                                                                                                                                    SHA512

                                                                                                                                                    64537edafd0454482694e21164259a29790a0f44ff6c9c8d62e22b7bb64e496422accc042c98c8a5b2d6eee30317222b20670906cc0e467c53bfb18953219d1c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
                                                                                                                                                    Filesize

                                                                                                                                                    16KB

                                                                                                                                                    MD5

                                                                                                                                                    15e99cbba91068813f0b006eb092d46a

                                                                                                                                                    SHA1

                                                                                                                                                    5dda189459e186aba8bde39ad10620b88df4575a

                                                                                                                                                    SHA256

                                                                                                                                                    4c3cbecae2ad561a91bcb112c907050f66e90428e77b27bf1b1c9d8a3ef0ef50

                                                                                                                                                    SHA512

                                                                                                                                                    d8fd2a5be58526bae6de1ffd046301ac88df394f3f7d26e7b5a11b09bff6b66565b1fa6b47d590419f123ff29121f9a3aaf589ec4fdfcc2cad3a91dc9f059459

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
                                                                                                                                                    Filesize

                                                                                                                                                    33KB

                                                                                                                                                    MD5

                                                                                                                                                    e1b27136452c0b848417397db9b5171e

                                                                                                                                                    SHA1

                                                                                                                                                    ab52cd5e33d8ab1ad8b489c6da92842e91ed5227

                                                                                                                                                    SHA256

                                                                                                                                                    0ebe361741c5e046fc86dc01e0abb86db0b3c0055940729762e56aae3735bae6

                                                                                                                                                    SHA512

                                                                                                                                                    1c12cf5bfe77096c9acb9641cb1dd20f2d5a922e4d9587dde840cb8c45c8e16e3db83680463bff83707d0ceca9f30d48e1bc2c0d3f95a5e5bad755b11a5a6a50

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f
                                                                                                                                                    Filesize

                                                                                                                                                    111KB

                                                                                                                                                    MD5

                                                                                                                                                    a4b6b664d89b39e90653cb6483a37432

                                                                                                                                                    SHA1

                                                                                                                                                    a6e105ac5d267f85ea6c51df5451254e59a95aa3

                                                                                                                                                    SHA256

                                                                                                                                                    08bd93bd75f2b26cd4b952832900b65be5a23ecf8fa003d077e1ce5a9427f099

                                                                                                                                                    SHA512

                                                                                                                                                    7a181a554ed7fb23b5a71368dd033bc6848bc27bb9231ae1ea39a68ce1ffd3a2cc9aff95fcbaedb1e603df4000cffc9460159f836e985768992f070dfbfb536f

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020
                                                                                                                                                    Filesize

                                                                                                                                                    18KB

                                                                                                                                                    MD5

                                                                                                                                                    ce4c7d1372a2686ca61a83a53cc53481

                                                                                                                                                    SHA1

                                                                                                                                                    1fb11b54ce19ae72cd5cc13c0fe28c9f6389a9c7

                                                                                                                                                    SHA256

                                                                                                                                                    326a1140babd8fbdde8633873c0fd56acb5bd4550f9b285a13d0a1bdc3810ac4

                                                                                                                                                    SHA512

                                                                                                                                                    79d4f9b24dc9d4b4897b4df65e3a28960bdf64c72f04d0ac565b73c18b5b8b38f6235ad9f28f2c24b698946c56084d7cd9050fce48a78a8c4ff1bafd7d2da7fb

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021
                                                                                                                                                    Filesize

                                                                                                                                                    133KB

                                                                                                                                                    MD5

                                                                                                                                                    c15698bec06c4cfc15478530778a270c

                                                                                                                                                    SHA1

                                                                                                                                                    b88a3222a581f1a07472b6d5a1168c15b8d15e2f

                                                                                                                                                    SHA256

                                                                                                                                                    728c4a467305b460db6ebb48bf98670724aa463adbe7a981a1226ac633ff78cb

                                                                                                                                                    SHA512

                                                                                                                                                    78d36727e9fdfcb706c8c66f5955abdeaeea79de560ec0340c1f7cb09a095b5bb622ad9a0155a690fe3c71ef679cb716740b57d09bf018318a310ba7c574bfe7

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
                                                                                                                                                    Filesize

                                                                                                                                                    154KB

                                                                                                                                                    MD5

                                                                                                                                                    c7af3beb7360e8dbbb70bbff5c85a7f4

                                                                                                                                                    SHA1

                                                                                                                                                    31a15efea390c96133e6b1392619b36102986b14

                                                                                                                                                    SHA256

                                                                                                                                                    3e6a36b2445f61c52840541e02e71733c65db9a1023b8535e7016928a63d0364

                                                                                                                                                    SHA512

                                                                                                                                                    fd88c4562218d9468acbf4a9ae19c0643c2d94621988f55c440f42bffd1e84958cb6183512fbade9c18df2639a429a63b44715ae9df27f320de6e1b07ec6665c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023
                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    MD5

                                                                                                                                                    c71cf92103783b21f78dc899c08c1910

                                                                                                                                                    SHA1

                                                                                                                                                    47a48bf7452eecd9f22f1c4ba79fe8def6a446a5

                                                                                                                                                    SHA256

                                                                                                                                                    8ecbd49ee92bf16ca7d6578efe69b6f166e4fd7c5050306298d61348e7e5d3ed

                                                                                                                                                    SHA512

                                                                                                                                                    1eab36037895ebebd56f734b769a8da160b432d5d824b50da788240f6240aac203d71793e11936e5ecdfdbc094dc141201df498f219171a3482d9435c5a477e8

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025
                                                                                                                                                    Filesize

                                                                                                                                                    63KB

                                                                                                                                                    MD5

                                                                                                                                                    34d5015941e4901485c7974667b85162

                                                                                                                                                    SHA1

                                                                                                                                                    cf032e42cf197dcc3022001a0bde9d74eb11ac15

                                                                                                                                                    SHA256

                                                                                                                                                    5c166a5d40aeefd0679a14f95e47ff28824e66abba82adfa30be41803cc25632

                                                                                                                                                    SHA512

                                                                                                                                                    42cef1d6847f535a6e8afc0469b9f5ef79ce4ab21512ac7eeda8ef9667d5f24bb33b30aba9a29824b3d853d41d4addf6bdee2042cf4fbd0a033b61657c671f0c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026
                                                                                                                                                    Filesize

                                                                                                                                                    29KB

                                                                                                                                                    MD5

                                                                                                                                                    79ffcf947dd8385536d2cfcdd8fcce04

                                                                                                                                                    SHA1

                                                                                                                                                    a9a43ccbbb01d15a39fac57fa05290835d81468a

                                                                                                                                                    SHA256

                                                                                                                                                    ffc11b830ad653e7a9d4257c7cd7a8056db5e7d7e89439b8fd67d1207b1729bf

                                                                                                                                                    SHA512

                                                                                                                                                    3dc82ecb2abc8c567434666a9162cc188de669927c3dada6392d8bd97d5e746f1ed350e1a02ec016ee2b1dc8a9cc5c71c553f2ef1293d6793800c276560859a6

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    MD5

                                                                                                                                                    c52974bfa5e76ceb779bc806d73713cd

                                                                                                                                                    SHA1

                                                                                                                                                    13c9c7afce15900956f9354c55a5199672a2b284

                                                                                                                                                    SHA256

                                                                                                                                                    10e4b37abe3bdd7fcc80f7c11d5ae30c2e4fa3071550db475613f4de25ecf600

                                                                                                                                                    SHA512

                                                                                                                                                    491894406398c2d21c45958ece3041778ce0a2835669b808020469d7352aa817b36f176701020f406053f267ffcba1f8be48309dd88eabf5e912283ad85eb313

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029
                                                                                                                                                    Filesize

                                                                                                                                                    67KB

                                                                                                                                                    MD5

                                                                                                                                                    bcfda9afc202574572f0247968812014

                                                                                                                                                    SHA1

                                                                                                                                                    80f8af2d5d2f978a3969a56256aace20e893fb3f

                                                                                                                                                    SHA256

                                                                                                                                                    7c970cd163690addf4a69faf5aea65e7f083ca549f75a66d04a73cb793a00f91

                                                                                                                                                    SHA512

                                                                                                                                                    508ca6011abb2ec4345c3b80bd89979151fee0a0de851f69b7aa06e69c89f6d8c3b6144f2f4715112c896c5b8a3e3e9cd49b05c9b507602d7f0d6b10061b17bd

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030
                                                                                                                                                    Filesize

                                                                                                                                                    20KB

                                                                                                                                                    MD5

                                                                                                                                                    aaba52b707a392f8f6772cdb32637f5e

                                                                                                                                                    SHA1

                                                                                                                                                    4a7ee36e467b2a8afb2c15a56f0a1890e9c81d5e

                                                                                                                                                    SHA256

                                                                                                                                                    d9e2a530fab681b6cfc0e7642d7be341e10f7b457c71a174501846d8d9674837

                                                                                                                                                    SHA512

                                                                                                                                                    d511e83ff363e19c4a54a1ad643d03ca4ec60ff91fcc309bc02cc4f60d14940997378206ec5635c23e9969b221231a6fb2253473d845cf259881feb720a36519

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f52b4e6305d9bbb_0
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    583ae0aa1915ae44e965b37b9925d32f

                                                                                                                                                    SHA1

                                                                                                                                                    66a6dfec58c42399f0b57c350e9c3c38917ce3bf

                                                                                                                                                    SHA256

                                                                                                                                                    df6cff396fd958cca15c7940639acf5e8d1df21e946b57d7f215283db4f33bf4

                                                                                                                                                    SHA512

                                                                                                                                                    f9b7050381168bddb10f72c19eb7d8761c1fae3b552b40a30829834736f42f1328571afdfdcd6e09cd80086845eba03d961e7724208c82d1863031a566b341ac

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\adf22c31064a7f0b_0
                                                                                                                                                    Filesize

                                                                                                                                                    32KB

                                                                                                                                                    MD5

                                                                                                                                                    84c8ba8ebd79009d0fbd1c179b8e80f0

                                                                                                                                                    SHA1

                                                                                                                                                    0ecfc267329525d1446c95244c2439c47615f22b

                                                                                                                                                    SHA256

                                                                                                                                                    6db3c0669713fb25ef85535891a7d63bb8c1f74c1af67b8059f45cf6787eac16

                                                                                                                                                    SHA512

                                                                                                                                                    a2a3847f29d18c7da7f802350789f5e033ad9e78c9003ca6caf72aaa947cdaae4554826efc131db281455a7255e172133e5591b7ec16a78df7c5fe40abd8dbc1

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    c94b413ba5ecde8858e6a8ce7fae4769

                                                                                                                                                    SHA1

                                                                                                                                                    b6dec6838a37293c132044aa6808cb7fec2d422d

                                                                                                                                                    SHA256

                                                                                                                                                    5987adf1b3b7c62b871746e7df78e496e9a9cfdcc81fbf280652cd70d767e5df

                                                                                                                                                    SHA512

                                                                                                                                                    9d47f5112cb93d592b005bbda6e919160108aeda0180119178426769154d0d8725f331d9bf0cb7658c73b8f34b445b59550bfcca1ef778425222e5a61b228632

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    df9f73c06b56d7c7e7b72a6755549e43

                                                                                                                                                    SHA1

                                                                                                                                                    2a3d7ab6edd38b51922beb578b13a9d3b7eaae42

                                                                                                                                                    SHA256

                                                                                                                                                    e91fd6ccb31b606466617b58f14b90129a1d13757abf1d934ff785acbae54a6a

                                                                                                                                                    SHA512

                                                                                                                                                    9d02d39947ec77b302413eee6d501ca4f1af922547a15bebd9bfbfd6477b8b01fa01267c8dc6b277b3a989eb96435ba2ce135da4353be1e2b5e7512661b0402d

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    a541ef633a33b56c0af6aada22016e0e

                                                                                                                                                    SHA1

                                                                                                                                                    de73dd76526ba89385bae3db140f662d598ac783

                                                                                                                                                    SHA256

                                                                                                                                                    dff9a30e84189d98603f995357099cf279fbe9f965b37d5ccd19070d17da0d50

                                                                                                                                                    SHA512

                                                                                                                                                    d24055c72a7bbf94002f1fe9a5a25f7e2a06570fddd4786eec0228911ca83a4a1cda8f254c02c7457835829cb055a5f7b49952106f1cb47924e0aee15ebbf8d4

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    4ce9657856b4922496d12f6bd1c84284

                                                                                                                                                    SHA1

                                                                                                                                                    ac0ac17579dfe0a14e0c72fd2e2d063000531244

                                                                                                                                                    SHA256

                                                                                                                                                    c078add1db0d1630bebc10f62b526e33e76bd86d32a310e6c85ea3a0b277f15f

                                                                                                                                                    SHA512

                                                                                                                                                    e49189176cc448653dcf4e1f7900172c804b4ae3a33300411887f31de387931d25ec8e13393aadcfe1b5cdc2f51a6aa749fb47b2e0c8cea4b4dfe023f6c2c773

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    00721904108a4aa9f54e42a4a8690068

                                                                                                                                                    SHA1

                                                                                                                                                    72d4e555dd85d81479ebf40992d64095d003f326

                                                                                                                                                    SHA256

                                                                                                                                                    208390cc1681ae0177969bd575df8d748f31aeb47553ebd156fdb5792751d554

                                                                                                                                                    SHA512

                                                                                                                                                    7831cceba4540718d4a4a0db74deec94565d18d78551799908c3cd1d112c53ec05445691b9603287b5ebfed5fe20079fc22837251f71e4683c2bed1377251fe4

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                    Filesize

                                                                                                                                                    3KB

                                                                                                                                                    MD5

                                                                                                                                                    3a6658a83613e7065ca8e77e6a638881

                                                                                                                                                    SHA1

                                                                                                                                                    d0f49ea7f00d29db4e784080d3bc7cf1ce47c041

                                                                                                                                                    SHA256

                                                                                                                                                    763018763d1253e441efc2f853faa080580c64a8caf6b7dccb4a5c01ef71f167

                                                                                                                                                    SHA512

                                                                                                                                                    36f5e7fed5165ac503956c5d0d3d217fa58f707df6afe2115798c057fc21e11e835c54735500d4dc65cc02bcc3bb48bf3fe93ba121a8851e9a7cceb016e95b9b

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                    Filesize

                                                                                                                                                    8KB

                                                                                                                                                    MD5

                                                                                                                                                    6c1258f8307fe0730cae1212dc44c724

                                                                                                                                                    SHA1

                                                                                                                                                    ab4be99fb46c24d40991627a82d7277770e89456

                                                                                                                                                    SHA256

                                                                                                                                                    d5e3a667ea39377649f0d0b57e6be4c48d1484f959b998b2e03c03480c2567ad

                                                                                                                                                    SHA512

                                                                                                                                                    eca9f4be39321e535451b1a54eb0f7a0f7259b849017f0eed6fafaa48a78c298d30446b03d7279790e27dfb235e89737377eb6ff8c6a4960639812658fb30ae5

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                    Filesize

                                                                                                                                                    9KB

                                                                                                                                                    MD5

                                                                                                                                                    5be674998029f49ce6a8042ab989b930

                                                                                                                                                    SHA1

                                                                                                                                                    bec6700b1aaa3d8d94d33a046d0996dc7773bfe9

                                                                                                                                                    SHA256

                                                                                                                                                    e4eed73319bd6c9c498c1ee764e9881bfeb0882835cb9580c3ee9ef336da4816

                                                                                                                                                    SHA512

                                                                                                                                                    22af04bc74c95b8123c7eff34d31d3776adb8a9d7569e3bd8f9166746ce45e0065423139c4ce25827fd1cf18b299ab1daa22f7d0b904722ef41acb345f3f1613

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    5b39bfc0a9a1a986b2e5d37f517d4331

                                                                                                                                                    SHA1

                                                                                                                                                    b865c0383d5b18f3fabeb15a40c650ab0a2af5a0

                                                                                                                                                    SHA256

                                                                                                                                                    66f12c6c06a789f363eec2319a5004c7fa412cdacd0a33f80dde0ab5a2541ed3

                                                                                                                                                    SHA512

                                                                                                                                                    385973a16973c62d37d7a7fd04884a6e2a8273450986fe34dbf9f24aa73c9fa6b0a4706a47beded249355009ce11bcb591c24a666f33ed03279a1eabb4a3e9c4

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    878df216d08d26c5356ffc3f52805a0b

                                                                                                                                                    SHA1

                                                                                                                                                    fe505ca732437a82765fb47f65a6ad572472546e

                                                                                                                                                    SHA256

                                                                                                                                                    60cd6aa50c9662e42987118ce71761c536705498dad85248b941237fa20e400c

                                                                                                                                                    SHA512

                                                                                                                                                    c6b2ce3f104514187a290dfce367026f707d510c3530ed547d2c445adc7d00edac994ca48eb2dfcb2c2be5b6a8d08b47cac882a7ff4e50baede7f51a3e096246

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    4d2f97f5574b305ebffc73ced5126d3e

                                                                                                                                                    SHA1

                                                                                                                                                    3af2ed164ac1cd0df77bd3daf23e65144c3df0bc

                                                                                                                                                    SHA256

                                                                                                                                                    d6031086d03e438f5f187e6c2a061908e1d3aca88ffb343fcf480e0557812fe2

                                                                                                                                                    SHA512

                                                                                                                                                    322ba5a5f3cdd4bf8c61906485c8bb24db4d9477af5320c0a37ba65dd228a046868cedddd6b1a1a8382f5c8e2863e8343b902bf78e820069dd4ccd7036d8bc93

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    5KB

                                                                                                                                                    MD5

                                                                                                                                                    7d58002034274e147fae640a67fb84f3

                                                                                                                                                    SHA1

                                                                                                                                                    6bec2709216d2a61365362a9d733f9b2cc4d7952

                                                                                                                                                    SHA256

                                                                                                                                                    aab120d01eb00992f04fc5b87db4069c088f0ca77cca2aa0ff7abd0ad12f4dbb

                                                                                                                                                    SHA512

                                                                                                                                                    ca6f552c83ea570f8696e66e6109a2da0470080a37a06f872ee9358d82b72b07dc3e0cbd04bdb191709a13aa0e5bc3eb3b42bfc404f359cf27dab8d4bde4e252

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    6KB

                                                                                                                                                    MD5

                                                                                                                                                    df2e85a4440c5e475574e33a0eafa805

                                                                                                                                                    SHA1

                                                                                                                                                    6c5e7a6b78a503601aa5d2bb3cecabf8215c44de

                                                                                                                                                    SHA256

                                                                                                                                                    0ab17153d7fce3589ffb4d39b7c8e1b40edb807a8038958c4a4a707072104000

                                                                                                                                                    SHA512

                                                                                                                                                    04905c85638b458cc2ca2e7cc26a3ece0ded4afc13dfd325565b5d8c2039cf1eb0b99e393dc767f94593a2f5773958ce5df28b17ca959ac8e43b5c94fe4b3472

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    6KB

                                                                                                                                                    MD5

                                                                                                                                                    4b9e5931db93476a55cc3ca95b9bcae7

                                                                                                                                                    SHA1

                                                                                                                                                    4b75ab038f79072c14c9168a59b74ccb6e9dac7c

                                                                                                                                                    SHA256

                                                                                                                                                    9da19a1bbab3991bfcd099478ab707f63190587a30dbe30275da155419596c0b

                                                                                                                                                    SHA512

                                                                                                                                                    12d0d20a3dbf8efeae44a5f556b7935902076d4f6a448074e8e264a82f15081d6c5839a623d9079f45c95e0196e4cdd7d9cfda6ddfff11f9925133c3b4b2197e

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    4f9dcd6c56902d323b0db1e25b3c2c0b

                                                                                                                                                    SHA1

                                                                                                                                                    52feac97d949a2142cc74f5184bf95b1ed28f04c

                                                                                                                                                    SHA256

                                                                                                                                                    40c762cb27adc1bbac363c510f882a235bf3f4c40ad943cefa66bb678d0ebb03

                                                                                                                                                    SHA512

                                                                                                                                                    93dff01a8b00fd3bafa09f281f1b23658ea821d493bd67c5d0b8c0ee695f1ef4424d0257e2be76560826c7a980109c714fbfa6f6ab7d3162ca0637e2123e1d18

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    f48a262611e52e9bddc880ed87c60b9b

                                                                                                                                                    SHA1

                                                                                                                                                    4d1868fd67952504efb10cd546432ef93b13caf9

                                                                                                                                                    SHA256

                                                                                                                                                    1bca1e147592fcfd629a34ad5e4b899349b28d165a223384119f2bdb9511cf71

                                                                                                                                                    SHA512

                                                                                                                                                    927e8a2fe554466d621fa53782e6bf4a1ff3c41872eb5099b144e633be83bccc094a3d1df7d5bfc8830d303e67a4af7d04b4a622df7b49a1417e51b949842483

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                    Filesize

                                                                                                                                                    2KB

                                                                                                                                                    MD5

                                                                                                                                                    5e933478094d2974412bfb0262d25fe2

                                                                                                                                                    SHA1

                                                                                                                                                    6d611763a2b7fdc74e924648fb228cce628d6a26

                                                                                                                                                    SHA256

                                                                                                                                                    97e49290f4de06da68aae7111c556ab178c7fe5c08be436c041fa2dd8b05d012

                                                                                                                                                    SHA512

                                                                                                                                                    eb54f10c16d9fa9b1142072f6a348711e6679ec5f42ac66dba130079e236465ac41eb9e37071206f78bd1c92559be4484a9254d005f13feb09df243b590619f8

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                    Filesize

                                                                                                                                                    1KB

                                                                                                                                                    MD5

                                                                                                                                                    0387bee078eabdbfe9eb1946d1e22c5f

                                                                                                                                                    SHA1

                                                                                                                                                    6937a768ac60fc8f06ffdf446b4b4c6945dab29d

                                                                                                                                                    SHA256

                                                                                                                                                    005e0aacace71e66cdbf2942a3a0b03e012c746e83ac4ad72758a31ca3dcf67f

                                                                                                                                                    SHA512

                                                                                                                                                    de77b593c40cb3b72368492032b1d3a988f846304ef5e171e627f0c8b65365b4a135c945eb84b818ce26384b6069a27c1a6fa074a9599f4a4e2f45d64ef84836

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                    Filesize

                                                                                                                                                    2KB

                                                                                                                                                    MD5

                                                                                                                                                    c58dcd2b3b40c2b9ca75c81506a0fe4a

                                                                                                                                                    SHA1

                                                                                                                                                    e115978ce204a70d6edec68a81ea291ec02bf9ba

                                                                                                                                                    SHA256

                                                                                                                                                    1dcdf07cbacb9c9247540f134abf4cdc46460afbaae3887728d29322ba5df2e7

                                                                                                                                                    SHA512

                                                                                                                                                    81d4923ca875d2c3c98e7b0c60cbf57955f968b286ccfd745e3b12ac345bcb8eb9dee517b273d289b9a9a9cfc1faba20397514f03e4834b7271270eee4abf42c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                    Filesize

                                                                                                                                                    1KB

                                                                                                                                                    MD5

                                                                                                                                                    28e73dd497c4737950fc09bd498c3ee2

                                                                                                                                                    SHA1

                                                                                                                                                    8fdae974ce5ef3ec1b4ec4dbcfe5e1c29ac623c8

                                                                                                                                                    SHA256

                                                                                                                                                    b3d57f1df3ec38436916493f78f80dcc952b94b7c7a43c823283fb7757a6efae

                                                                                                                                                    SHA512

                                                                                                                                                    d05dee124d7fea9873576592eb5ca8442cceef79ac5f97fed8f6768efdeb05bef5a22869926911c22c5730602047c3dadd3609fa3e4dbbf80a626a941c85958f

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                    Filesize

                                                                                                                                                    2KB

                                                                                                                                                    MD5

                                                                                                                                                    9c6cc5c86874ae57de2325dfa4c59227

                                                                                                                                                    SHA1

                                                                                                                                                    5ee2896255c6f32942f709ded09566b58d49f89a

                                                                                                                                                    SHA256

                                                                                                                                                    b0e5e14fb745e67510523e97be33949b410d89b06a5d1b28644fff1fd18ee66d

                                                                                                                                                    SHA512

                                                                                                                                                    dad7b715dd4f2ef8139276f7c9badb1740258bac51a00c5f2b0237b9128954a3ce1b7eda4a398f4edf7a2d91ce330336e136d77c9bed37a871d24728b82c0754

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                                    Filesize

                                                                                                                                                    16B

                                                                                                                                                    MD5

                                                                                                                                                    6752a1d65b201c13b62ea44016eb221f

                                                                                                                                                    SHA1

                                                                                                                                                    58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                                    SHA256

                                                                                                                                                    0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                                    SHA512

                                                                                                                                                    9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    d21f034c26fe28457bddf323785201a4

                                                                                                                                                    SHA1

                                                                                                                                                    1ea93522b76792764e03b5320fecfbc641a22b4b

                                                                                                                                                    SHA256

                                                                                                                                                    4e0e388e2ee0484df116ec6a58e8ba02c9757b09850f163d3e25a32349aff1d6

                                                                                                                                                    SHA512

                                                                                                                                                    275dd13868e57c07d5f03d98c5c030039ca07693a69b0238a5f3203e1a717dc204f4480f2b56ca4897516588e1e7a27ccf729efac7710886213677fc61ad0bdc

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2831321-9a41-44b4-a0b1-359973d103cc.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    10KB

                                                                                                                                                    MD5

                                                                                                                                                    f254406293bff36b0cc69b6b0d3ee017

                                                                                                                                                    SHA1

                                                                                                                                                    1774b4a5b9e2bd6d889ed119dabc5a94889a5e60

                                                                                                                                                    SHA256

                                                                                                                                                    ee3d83bed2222daa4e2e1cc5bfddd6f6ad0bf003c54a98663d7e5277f6c1eb04

                                                                                                                                                    SHA512

                                                                                                                                                    dd58090eaa55b602b8879b2bba18cae974d981024ae6dcbe2eef4c8dacf067aa3d14284d61d34631d067d6e07e6e0b19af8bf5d6948a6c89a5e43e2e7701cf8d

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y0bypz8z.default-release\activity-stream.discovery_stream.json
                                                                                                                                                    Filesize

                                                                                                                                                    24KB

                                                                                                                                                    MD5

                                                                                                                                                    3594e3a541dd24ba8725ad392d42ed51

                                                                                                                                                    SHA1

                                                                                                                                                    5dbd6ecd13621c0137a94b543a61ac816da6b1c7

                                                                                                                                                    SHA256

                                                                                                                                                    94fb89207778811ecaf798535dca966b92e787203239cb8c41926119d772ac88

                                                                                                                                                    SHA512

                                                                                                                                                    b9b83f87ccf9a04ff8bbc90b47571791c2764503635b607c9405f5669a415477937e39b05ba216bc4c528dbd5eb7ac7eacb80e4aa13bd36ff06b2f1033d12e58

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y0bypz8z.default-release\cache2\entries\0496E33B07BB9340090B6FF9A653DA5443DBD403
                                                                                                                                                    Filesize

                                                                                                                                                    224KB

                                                                                                                                                    MD5

                                                                                                                                                    f72375119957009b9ace50787972ae40

                                                                                                                                                    SHA1

                                                                                                                                                    1813037e09ecea8c8ef257a58fa6c35efae6e8ff

                                                                                                                                                    SHA256

                                                                                                                                                    532573ce99449702e9e6a421801597453207e42d3dd425b40eb8e567f3a09967

                                                                                                                                                    SHA512

                                                                                                                                                    6ebe2459ce2fefb6ed0daffd44d127583296ebc332591bbd1887ea251325c6395e41dbd71f30cb6d8c94c1352a72213a39a3554b11734b7b14678bd60011ad12

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y0bypz8z.default-release\cache2\entries\6653BC7BE242C21AA1988A4A42D1DEDA18231C31
                                                                                                                                                    Filesize

                                                                                                                                                    13KB

                                                                                                                                                    MD5

                                                                                                                                                    1c9387c34975229ebe5fe69072c32fe5

                                                                                                                                                    SHA1

                                                                                                                                                    9c20e3f889b062d680fc99294a27a1d73b26c6b4

                                                                                                                                                    SHA256

                                                                                                                                                    3c8582b23bf7bd5e1b5c4d4b62c643844e65f10dc27b4beb577f3236111808ba

                                                                                                                                                    SHA512

                                                                                                                                                    764e33a44d174f83374fdb4965a33dcea4d0dfafe2e9c063759c58eb6d80df492271b0667f46fbccc6ae55b909771dcb6dd6c6717e717e22ff16c5e9ba850fd9

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y0bypz8z.default-release\cache2\entries\FBF093D342F7996FCEDB2B9CFB01A3ECAB8D99F9
                                                                                                                                                    Filesize

                                                                                                                                                    13KB

                                                                                                                                                    MD5

                                                                                                                                                    87b3d2327adb246bd9f6edcfe4a26a9c

                                                                                                                                                    SHA1

                                                                                                                                                    aa187ea312d27cf78dccf2e60f3cca548552cac8

                                                                                                                                                    SHA256

                                                                                                                                                    a02ad70f830961ab266419912fafcc87b9c6360983946540c36a9a4f5624f8d2

                                                                                                                                                    SHA512

                                                                                                                                                    a70b2e8e6fc8df41b4761dbccb2240a755d7b64d29a2c4930cee69541c92b74b0b1cf38a097b5d3af44eba59b97bd44a9ff50993318a2d3e9177d5e579b44632

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y0bypz8z.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
                                                                                                                                                    Filesize

                                                                                                                                                    15KB

                                                                                                                                                    MD5

                                                                                                                                                    96c542dec016d9ec1ecc4dddfcbaac66

                                                                                                                                                    SHA1

                                                                                                                                                    6199f7648bb744efa58acf7b96fee85d938389e4

                                                                                                                                                    SHA256

                                                                                                                                                    7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798

                                                                                                                                                    SHA512

                                                                                                                                                    cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\_MEI16202\VCRUNTIME140.dll
                                                                                                                                                    Filesize

                                                                                                                                                    74KB

                                                                                                                                                    MD5

                                                                                                                                                    1a84957b6e681fca057160cd04e26b27

                                                                                                                                                    SHA1

                                                                                                                                                    8d7e4c98d1ec858db26a3540baaaa9bbf96b5bfe

                                                                                                                                                    SHA256

                                                                                                                                                    9faeaa45e8cc986af56f28350b38238b03c01c355e9564b849604b8d690919c5

                                                                                                                                                    SHA512

                                                                                                                                                    5f54c9e87f2510c56f3cf2ceeb5b5ad7711abd9f85a1ff84e74dd82d15181505e7e5428eae6ff823f1190964eb0a82a569273a4562ec4131cecfa00a9d0d02aa

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\_MEI16202\python310.dll
                                                                                                                                                    Filesize

                                                                                                                                                    1.2MB

                                                                                                                                                    MD5

                                                                                                                                                    7e41cab9dc7d66a88c4f8353e8e2a9fa

                                                                                                                                                    SHA1

                                                                                                                                                    e670c3839c5176b9016109bc8a2420593edd4c6d

                                                                                                                                                    SHA256

                                                                                                                                                    46605e4bb33ec09676dc7085c4709ee05643f756bd90515a6a17261fb3cd585d

                                                                                                                                                    SHA512

                                                                                                                                                    639fe9f81e4f0d537656448b958060ac60548e3d6ad95b94039bcdb766be6693a13123ca18d5024975c2367abb37b5f692b7df4e666e660c4642faacf64a994b

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hmb2xdn0.avd.ps1
                                                                                                                                                    Filesize

                                                                                                                                                    60B

                                                                                                                                                    MD5

                                                                                                                                                    d17fe0a3f47be24a6453e9ef58c94641

                                                                                                                                                    SHA1

                                                                                                                                                    6ab83620379fc69f80c0242105ddffd7d98d5d9d

                                                                                                                                                    SHA256

                                                                                                                                                    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

                                                                                                                                                    SHA512

                                                                                                                                                    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                                                    Filesize

                                                                                                                                                    479KB

                                                                                                                                                    MD5

                                                                                                                                                    09372174e83dbbf696ee732fd2e875bb

                                                                                                                                                    SHA1

                                                                                                                                                    ba360186ba650a769f9303f48b7200fb5eaccee1

                                                                                                                                                    SHA256

                                                                                                                                                    c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

                                                                                                                                                    SHA512

                                                                                                                                                    b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
                                                                                                                                                    Filesize

                                                                                                                                                    13.8MB

                                                                                                                                                    MD5

                                                                                                                                                    0a8747a2ac9ac08ae9508f36c6d75692

                                                                                                                                                    SHA1

                                                                                                                                                    b287a96fd6cc12433adb42193dfe06111c38eaf0

                                                                                                                                                    SHA256

                                                                                                                                                    32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

                                                                                                                                                    SHA512

                                                                                                                                                    59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                    Filesize

                                                                                                                                                    19KB

                                                                                                                                                    MD5

                                                                                                                                                    401fb66d72f92adaf0bbd0dfada20560

                                                                                                                                                    SHA1

                                                                                                                                                    31894e74640b650269a583e80990cec77613ca19

                                                                                                                                                    SHA256

                                                                                                                                                    fcd35024677fd098b1ebecfb7cf9e4b5d892c8df0320a6d0a585620e0b2381eb

                                                                                                                                                    SHA512

                                                                                                                                                    840cc8f2602e82184f35af75d8d6e6bf8a911dac9f096f9dbd432969578cd90deee005606c68064678de10cc62e90740d22bb48bd86bfaaab982d5524be24c05

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                    Filesize

                                                                                                                                                    20KB

                                                                                                                                                    MD5

                                                                                                                                                    2bb71ac41c2c3436a0a234642c19b1ae

                                                                                                                                                    SHA1

                                                                                                                                                    50cd634bb9ae41612cbd22b6930e0239c42e09e6

                                                                                                                                                    SHA256

                                                                                                                                                    c39705a82c4b936e68705050d79e06befa74f46e4a60abf4d74437aee84e160d

                                                                                                                                                    SHA512

                                                                                                                                                    92767d2fcf19ab6ec3059e5999ef2a684e6bf979973061bff5e1a1fcb8fa0b098960c8fb1edbfb172a16694f1fe65f87d3c665807768f4f37b9306b5b995c477

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\AlternateServices.bin
                                                                                                                                                    Filesize

                                                                                                                                                    6KB

                                                                                                                                                    MD5

                                                                                                                                                    3535e86542b9605fd6001c8783931fc9

                                                                                                                                                    SHA1

                                                                                                                                                    5e161302de944674a3c837b3a24b2a935f89ba9d

                                                                                                                                                    SHA256

                                                                                                                                                    76f082ba4a826064029f948daeccc23ea6a5eb32ad74f3dfe755197ec159e356

                                                                                                                                                    SHA512

                                                                                                                                                    d0ce4bd74897c067a50c561d8ef96ff4a02830395f8430a9f90ebb0c98fe3cdd81ff95740a6b190da34d218b3aff6a17b350102fa48dd52a27907dba3bce5967

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\AlternateServices.bin
                                                                                                                                                    Filesize

                                                                                                                                                    6KB

                                                                                                                                                    MD5

                                                                                                                                                    2368608336f11b4a9d2883f2dc3d2dda

                                                                                                                                                    SHA1

                                                                                                                                                    5c4869bc326a23dbf5550d610fc4d5532acdf96d

                                                                                                                                                    SHA256

                                                                                                                                                    01c2a85d0d482b03a07007a4fa6d1f1dc017e6dffdbd6202b9dbb14c649a83f9

                                                                                                                                                    SHA512

                                                                                                                                                    5ac4b5c91d73411a33bbc2deee5ac97ec3afdf4c9d3a315fab7c5fd32350dfabb2cd432865c23ded4f518b6be0927d68d8f782618fbde67ac32739db5d39968e

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\AlternateServices.bin
                                                                                                                                                    Filesize

                                                                                                                                                    11KB

                                                                                                                                                    MD5

                                                                                                                                                    42156cdfce95182458dfae310c10effc

                                                                                                                                                    SHA1

                                                                                                                                                    2ed15dcaa0a0c273d89d9d10b80b35da826c0543

                                                                                                                                                    SHA256

                                                                                                                                                    69747604ddf115222f2310f5dca4d92ad779e2fdd828169e344a92d047ce4ecb

                                                                                                                                                    SHA512

                                                                                                                                                    dc86516dc9d39e91a034c78a251e0cd9ec4250d42547f9d49a5bbf9a0ec046f5c952503c4bb24591ec794c6514b51efd8dfb6e14265ba8acbfe411cbf9e792b0

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    5KB

                                                                                                                                                    MD5

                                                                                                                                                    9cb3a944674897601278b9d593810789

                                                                                                                                                    SHA1

                                                                                                                                                    9e2d1f29e5d5e4bbbe4ee454b64c86d0ef0656c4

                                                                                                                                                    SHA256

                                                                                                                                                    0334a06c9e9222d693f92747f1fa11f6f02a59b7e088e9a31d0b25b343410d40

                                                                                                                                                    SHA512

                                                                                                                                                    1a6d780687ae6e08bc9ec97ae79738b702d201aa4de530b10cc693806e179029864061baee5c53cd2bf5b2f18ff5905bfdb628143465afc3864e65e0ab7fd655

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    6KB

                                                                                                                                                    MD5

                                                                                                                                                    47cfa6dd823ba67a2117f2e074ccc7eb

                                                                                                                                                    SHA1

                                                                                                                                                    87b05fb8fcc57383ab22b4a039606f2809f0dbff

                                                                                                                                                    SHA256

                                                                                                                                                    62572947902e06143a8c2e967d2ddfcd629452aa6029d4ec820ed51b4689ee5f

                                                                                                                                                    SHA512

                                                                                                                                                    03603d94f36372872a75452ba6aaf509b1f89ff8ec372b7e98ff5afa25e4c8cd237221aec9074a6a9dbb627c183867fd5c6f02143c790ba148b31e9343eac8f1

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    5KB

                                                                                                                                                    MD5

                                                                                                                                                    97b34bb1be92fc03c0b5a009ab5a6c39

                                                                                                                                                    SHA1

                                                                                                                                                    577924c155adaea0da6c36a3f10d3edde4f0f799

                                                                                                                                                    SHA256

                                                                                                                                                    afc41a3beea1284fffc60cdaa6887ba25ff2ff92a273e335cefda471af4e9f26

                                                                                                                                                    SHA512

                                                                                                                                                    db7e883213c34f9d4aab6ed563b47120d3430f5c3fa9dfd92a29ef51fc24c7050ec6234a3b9db8c115d992e6de6c275ca7ea8a2184e63d2c4d20b71df85ad550

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    14KB

                                                                                                                                                    MD5

                                                                                                                                                    8c9f84f26df9c81f892ea610740b4d35

                                                                                                                                                    SHA1

                                                                                                                                                    25ffbb0ef219bb8868b060dc115bc1d167fb68f3

                                                                                                                                                    SHA256

                                                                                                                                                    f8093d5b8e08ff496d1249ed9f3ad2cd1c1a97e5802bfdc67e5cfb1969e9266c

                                                                                                                                                    SHA512

                                                                                                                                                    ec3bd7370e6a968de5bfaae8bb35057a88a9e1b10f87554bc0d1b43393e0527556c3679a812c9d895d48f3af634bd22f5202ee83df2bf973b48e4531d667a6fd

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                    Filesize

                                                                                                                                                    14KB

                                                                                                                                                    MD5

                                                                                                                                                    cfe295a5e152a573a106ac66697ce744

                                                                                                                                                    SHA1

                                                                                                                                                    3c4f74f6dea3bfdf36b1961da8fbdcc62fcfadf0

                                                                                                                                                    SHA256

                                                                                                                                                    b62910146348804f1afa970191d2d1164e8c09e9eff67e09e93965c0b0749908

                                                                                                                                                    SHA512

                                                                                                                                                    1b0148b49e0a017adcc04740ce81ba6638afe7cda1298f57d797c94ea91ab2de18a321ff390fce1af71888d424b26467e0f5241504442f50a6c30042643c7285

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\pending_pings\abcc03c2-e706-4598-9578-5e63654ed08c
                                                                                                                                                    Filesize

                                                                                                                                                    671B

                                                                                                                                                    MD5

                                                                                                                                                    61f53658006258179a6b6a1e172ac767

                                                                                                                                                    SHA1

                                                                                                                                                    11a820e3eff0670c8850a526b6420956d9c065ef

                                                                                                                                                    SHA256

                                                                                                                                                    4772f5ab8148557a6089fa8860d91cfc64812a1b5f158f85aa429820a4ddcf18

                                                                                                                                                    SHA512

                                                                                                                                                    c458d8e407923b6f2e591a488b2fbf0c30a551b398f273e50b17414cd6e2bf656c6a7d080a27aae6149431c56bbe15bc519f963027f9e6ede73731225aea3ad3

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\pending_pings\f5e746ea-325c-45d9-b758-b21eebc851a4
                                                                                                                                                    Filesize

                                                                                                                                                    982B

                                                                                                                                                    MD5

                                                                                                                                                    9e61968409991d4262588e4f3f8c8fcc

                                                                                                                                                    SHA1

                                                                                                                                                    5ba9c18d8ad9c4ea450c28262f62e41d2cf5e1d4

                                                                                                                                                    SHA256

                                                                                                                                                    db9e593a73ddfce52d81f08e2a20fecab87e4a1020522770e16eb26bb7bef3a5

                                                                                                                                                    SHA512

                                                                                                                                                    75cb6fa67bc0cdbda419d2870a787b92517514525176c4c90f077cc6717897e41df0d0af6dfc8bc1d88118decdf167b1a6a796e2de9b98b43eb16dae65b86c32

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\datareporting\glean\pending_pings\fd917ed2-47f0-4a82-8738-95f6ffbf741e
                                                                                                                                                    Filesize

                                                                                                                                                    28KB

                                                                                                                                                    MD5

                                                                                                                                                    4e2d87b4fe0551c7fc37b1e54aa1490e

                                                                                                                                                    SHA1

                                                                                                                                                    518d3040e0f912d00c9ed527a2b218fc8ebc5bde

                                                                                                                                                    SHA256

                                                                                                                                                    9a3c5f69bd67f95e64e57ed9769cb2eecba023cb80121cfd24f32371a80da2b9

                                                                                                                                                    SHA512

                                                                                                                                                    91f93f5927737c1e52614456d4a12a4b4528a7b6b547d113d4970a64a1544af78f159d6ec6f4809e55aa6fc53d7f1eb194d0f803c11cf69428d6623574088900

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll
                                                                                                                                                    Filesize

                                                                                                                                                    1.1MB

                                                                                                                                                    MD5

                                                                                                                                                    842039753bf41fa5e11b3a1383061a87

                                                                                                                                                    SHA1

                                                                                                                                                    3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

                                                                                                                                                    SHA256

                                                                                                                                                    d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

                                                                                                                                                    SHA512

                                                                                                                                                    d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info
                                                                                                                                                    Filesize

                                                                                                                                                    116B

                                                                                                                                                    MD5

                                                                                                                                                    2a461e9eb87fd1955cea740a3444ee7a

                                                                                                                                                    SHA1

                                                                                                                                                    b10755914c713f5a4677494dbe8a686ed458c3c5

                                                                                                                                                    SHA256

                                                                                                                                                    4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

                                                                                                                                                    SHA512

                                                                                                                                                    34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json
                                                                                                                                                    Filesize

                                                                                                                                                    372B

                                                                                                                                                    MD5

                                                                                                                                                    bf957ad58b55f64219ab3f793e374316

                                                                                                                                                    SHA1

                                                                                                                                                    a11adc9d7f2c28e04d9b35e23b7616d0527118a1

                                                                                                                                                    SHA256

                                                                                                                                                    bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

                                                                                                                                                    SHA512

                                                                                                                                                    79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll
                                                                                                                                                    Filesize

                                                                                                                                                    17.8MB

                                                                                                                                                    MD5

                                                                                                                                                    daf7ef3acccab478aaa7d6dc1c60f865

                                                                                                                                                    SHA1

                                                                                                                                                    f8246162b97ce4a945feced27b6ea114366ff2ad

                                                                                                                                                    SHA256

                                                                                                                                                    bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

                                                                                                                                                    SHA512

                                                                                                                                                    5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\prefs-1.js
                                                                                                                                                    Filesize

                                                                                                                                                    14KB

                                                                                                                                                    MD5

                                                                                                                                                    ef854fafc9f39793dfb67cbfb1c75d3f

                                                                                                                                                    SHA1

                                                                                                                                                    a6424d7ed31ad3eadd2d833762eb786053e92839

                                                                                                                                                    SHA256

                                                                                                                                                    7f2c6e4a53619a4c58ea51a6503493cc362e74a1828f1393733af7979be59bc9

                                                                                                                                                    SHA512

                                                                                                                                                    6da53409e1b201438977d3fe6cab30665086d7eb6103861ed42026ab7183353416c6d9a9f306e59b38c907a7ecfbc094ec29c5d783aabda22427af2f70da6305

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\prefs-1.js
                                                                                                                                                    Filesize

                                                                                                                                                    10KB

                                                                                                                                                    MD5

                                                                                                                                                    7614fd8df2ba9501b737794f9aad1ea5

                                                                                                                                                    SHA1

                                                                                                                                                    2eff7ddfde1686c54e3ea7942d79930d8e9da03e

                                                                                                                                                    SHA256

                                                                                                                                                    9b07b81eff52e2aa94699dcff27bc87e113088a7494058d829d3b9c24e8c29c1

                                                                                                                                                    SHA512

                                                                                                                                                    c7a2b75273d6ed5198092edb55268c128b124648941e6dc27f6c9b5fc7fe4b602432de0dc2784c60bb69188901a0b1997ccffdcfc252eda033fd7a921741a0c8

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\prefs-1.js
                                                                                                                                                    Filesize

                                                                                                                                                    14KB

                                                                                                                                                    MD5

                                                                                                                                                    4c2ba0a02b0b694b5b28c70bf4c8719c

                                                                                                                                                    SHA1

                                                                                                                                                    a65d909f3ba78eedd44df4d12b13c35030704055

                                                                                                                                                    SHA256

                                                                                                                                                    9edfb145cf77f25ace18c9b66289a1c35b216ec14edcff31f42db84a61a350c0

                                                                                                                                                    SHA512

                                                                                                                                                    0e2346077fd5448480ad771b35e2f5716c32b617d67d81ca3a56bb4f418bb7626b651b8d500dbe73d643a4ed31665742fd22a9165d6d64fa9c6d1fe3a3953150

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\prefs.js
                                                                                                                                                    Filesize

                                                                                                                                                    10KB

                                                                                                                                                    MD5

                                                                                                                                                    3457813c324558643605d204e0d0af5f

                                                                                                                                                    SHA1

                                                                                                                                                    347d0d7b9cee96724dce4f334e8c50aaad484400

                                                                                                                                                    SHA256

                                                                                                                                                    54d288f8827949baab7915a8c2c3e8aad56efbfd40a08d9c9ea04892dd2a63e1

                                                                                                                                                    SHA512

                                                                                                                                                    5e30383aa28df5a37331beda193d5cbc9622c41909a1de7f865f0a9e18df9c91bd05be67e9c050321815471806095138917251de8aacba300ba239ef296fb2f8

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    1KB

                                                                                                                                                    MD5

                                                                                                                                                    05361f7845f68d41238f9d686e02005b

                                                                                                                                                    SHA1

                                                                                                                                                    1c45b3c586ef94bb1119a1bd3ba196dce712164a

                                                                                                                                                    SHA256

                                                                                                                                                    6096c2c5a951bc5a8effa3eee5a5538030e1eccf38219dda1baaa543a130be7d

                                                                                                                                                    SHA512

                                                                                                                                                    66a574292c1c119e4aaddb35a2f097f2b94d01e0c40ab88bfb6746508bcd98d493226b61c9a2aac0ab372b549043adc16041ed502c6cf993e6f48c3da323143c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    4KB

                                                                                                                                                    MD5

                                                                                                                                                    5f8cfdcef9af7302c25a432b49547c1f

                                                                                                                                                    SHA1

                                                                                                                                                    9f5e5d32da3fd8a4e1323e23fb36d1bcbb9e19f4

                                                                                                                                                    SHA256

                                                                                                                                                    9976d8ca5a7c164e8c52b8347e357f9523f867cf8a8ac3b69b77b7dc15281e9a

                                                                                                                                                    SHA512

                                                                                                                                                    9f3455f8a34597a7c5bb8b96c885435267b78daacf827baa95000777830f6d084a81dfda09f2f77f75637f572a8ea1bf2ccb1da9f54426dedbe849e33f99a9ac

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    8KB

                                                                                                                                                    MD5

                                                                                                                                                    e35f7c6aa84aa19fe97df0933bf49e28

                                                                                                                                                    SHA1

                                                                                                                                                    47e47095b4890d1cefdd79a527289be5f78b0592

                                                                                                                                                    SHA256

                                                                                                                                                    61f5e6e1957fc8281c08aad112565c7a321951780e2cfc7b6b2b9d0f8d247c17

                                                                                                                                                    SHA512

                                                                                                                                                    7770d5957ce8a5b4ac8ce67d0ed10861ea61ce72b03b0d6fadb55df404e4a49546f7aba16420aaae124172e860b43fa2798d033fa139e1d41f87645392c79dc4

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    4KB

                                                                                                                                                    MD5

                                                                                                                                                    3847f4dbe2a8a1ae34515ed81e6a6280

                                                                                                                                                    SHA1

                                                                                                                                                    9916eb4069f5545eb656e7e110928efe4a1fc1e8

                                                                                                                                                    SHA256

                                                                                                                                                    14c3b63f8d4ec16ee82256b3fb105527f89e4405a849b0896966d844fad34fcf

                                                                                                                                                    SHA512

                                                                                                                                                    4a5ab2e9c395662a119832c080941568a2171ef87e4f4552bb6c942eaf76e247b204f69332bf29b6b68aeb858f3fd9c8d04f027038dbf21c82581c709f8b8008

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    9KB

                                                                                                                                                    MD5

                                                                                                                                                    37f56311aa9b7658fdb28cdee8045d2a

                                                                                                                                                    SHA1

                                                                                                                                                    6a911d8ad5bd55b30cb8a49f1bf2db35fac316ec

                                                                                                                                                    SHA256

                                                                                                                                                    d90e186e2e35ad222f68feb55ed734655096dfb23ed50446bb0ffae18c114881

                                                                                                                                                    SHA512

                                                                                                                                                    017480ed58fe51cb2e9457305c6d37941b7e806b3312b41b8d51a9eecc9b8295520d3f7b3638dcfeebfa78128e760e7815bfba268548ee24f910a10ce03b4ac3

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y0bypz8z.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                    Filesize

                                                                                                                                                    9KB

                                                                                                                                                    MD5

                                                                                                                                                    f55d13e7992b5b8c3f8422d14c6b1ecb

                                                                                                                                                    SHA1

                                                                                                                                                    220a937b05118891b152c24c39a83cbd46fdd586

                                                                                                                                                    SHA256

                                                                                                                                                    5eb5108ec9501c1c22782f252415a2e1e3ca220a1ccae5bccd80c36d628ae855

                                                                                                                                                    SHA512

                                                                                                                                                    d2548f70c6ede2172f3048b2bd5d420ae79f0ddfc883f92a33639ba7789575156edf2e09b26393b95610edf69665a5e516755b3114576dcb1ad8aa25911c373c

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\Desktop\66bddfcb52736_vidar.exe
                                                                                                                                                    Filesize

                                                                                                                                                    190KB

                                                                                                                                                    MD5

                                                                                                                                                    fedb687ed23f77925b35623027f799bb

                                                                                                                                                    SHA1

                                                                                                                                                    7f27d0290ecc2c81bf2b2d0fa1026f54fd687c81

                                                                                                                                                    SHA256

                                                                                                                                                    325396d5ffca8546730b9a56c2d0ed99238d48b5e1c3c49e7d027505ea13b8d1

                                                                                                                                                    SHA512

                                                                                                                                                    6d1fa39560f4d7ca57905bc57d615acf96b1ef69ca2a4d7c0353278e8d4466298ed87f514463c49d671cb0e3b6a269a78636a10a1e463dba5c83fe067dc5df18

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\Desktop\66bddfcb52736_vidar_dump.exe
                                                                                                                                                    Filesize

                                                                                                                                                    190KB

                                                                                                                                                    MD5

                                                                                                                                                    ddad21cc5098c330935718e61139caab

                                                                                                                                                    SHA1

                                                                                                                                                    c4ae160efd9d0bc5b2430e5a906a4b2dd140ae14

                                                                                                                                                    SHA256

                                                                                                                                                    e00b6c3aae6a07342179ecf4d1c447ae2c5e035d7a40be4aa33c847ed5b0c5b6

                                                                                                                                                    SHA512

                                                                                                                                                    3d60d0a97bfabf8d0cd1915888d15ae8a82852205d010e4b5b6e22e1f55d963ef95f0a84788bd82ce3241c9f0fb368f17e1e2f1fd026689f453f0a9272982781

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\Downloads\fakenet3.0HkMfq0K.3.zip.part
                                                                                                                                                    Filesize

                                                                                                                                                    8.0MB

                                                                                                                                                    MD5

                                                                                                                                                    85de6b0dd12dcea4946c9854401f7788

                                                                                                                                                    SHA1

                                                                                                                                                    00286f22f65a617333a8ca2f1df1daa7b6fa392a

                                                                                                                                                    SHA256

                                                                                                                                                    cd3f263a01926366643118c541a6ad24a171b4369363a60deb9a570a1d600865

                                                                                                                                                    SHA512

                                                                                                                                                    2d30328d96d7aeb61834db4f2709e92d6226e06ab6e0fafce77dede7134ac30d5620c1603949a050e418ba4b09d524dd3d85229dbfa3915fc2510b035af34571

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\Downloads\mal_unpack32.X9BXXYQB.zip.part
                                                                                                                                                    Filesize

                                                                                                                                                    368KB

                                                                                                                                                    MD5

                                                                                                                                                    8cf34829dd97c7b2ea6aa5d1230b70a1

                                                                                                                                                    SHA1

                                                                                                                                                    b2d579c67e2ecc1399c4b5b0380e5c08ef477b6f

                                                                                                                                                    SHA256

                                                                                                                                                    107f7d53f74363f556a4697973e073ffac0fc43eb03fe606272163946be43b86

                                                                                                                                                    SHA512

                                                                                                                                                    645d640e26025c4e235c75ff606830a182fb7f05bc10678222321e200aa0461716aed49919dc1d3c7abb06c290b975323211b1a2b9dd6eef33a6cc00a0f4fab3

                                                                                                                                                    Download Submit

                                                                                                                                                  • C:\Users\Admin\Downloads\snapshot_2025-01-06_23-25.zip
                                                                                                                                                    Filesize

                                                                                                                                                    33.4MB

                                                                                                                                                    MD5

                                                                                                                                                    9f2a416a25a24b83e2b1ec633e34937a

                                                                                                                                                    SHA1

                                                                                                                                                    1e45a437f014755bd5ad9e338c804d62088a3939

                                                                                                                                                    SHA256

                                                                                                                                                    2683655f86730b40e3dac20a611f11e87631394e3499fa2a875b997375d24892

                                                                                                                                                    SHA512

                                                                                                                                                    ee997b89d7f3f79bea48e49194f8718b3a780ce1a338cfef9d127145a4daeabf0de14762a73e08f8724a26766315e408c8c0ce09721f958baa333892b6b3a10d

                                                                                                                                                    Download Submit

                                                                                                                                                  • memory/1128-5363-0x0000000070A00000-0x0000000070A15000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    84KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5422-0x0000000070A70000-0x0000000070A7C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5362-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5361-0x000000006FDF0000-0x000000007004C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5360-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5357-0x0000000070A70000-0x0000000070A7C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5365-0x00000000709D0000-0x00000000709F7000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    156KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5364-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5359-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5356-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5368-0x000000006F180000-0x000000006F6F8000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5367-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5366-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5369-0x00000000709A0000-0x00000000709CF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    188KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5354-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5376-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5377-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5378-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5383-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5384-0x000000006FDF0000-0x000000007004C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5385-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5391-0x000000006F180000-0x000000006F6F8000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5392-0x00000000709A0000-0x00000000709CF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    188KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5393-0x00000000707A0000-0x00000000707B0000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    64KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5394-0x000000006F0E0000-0x000000006F115000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    212KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5395-0x000000006FDC0000-0x000000006FDCA000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    40KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5396-0x000000006EFC0000-0x000000006F0D4000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    1.1MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5397-0x000000006EF50000-0x000000006EF5B000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    44KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5425-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5411-0x000000006F180000-0x000000006F6F8000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5428-0x0000000070A00000-0x0000000070A15000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    84KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5427-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5426-0x000000006FDF0000-0x000000007004C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5424-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5423-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5614-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5421-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5420-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5419-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5418-0x00000000709D0000-0x00000000709F7000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    156KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5417-0x000000006EF50000-0x000000006EF5B000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    44KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5416-0x000000006EFC0000-0x000000006F0D4000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    1.1MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5415-0x000000006FDC0000-0x000000006FDCA000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    40KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5414-0x000000006F0E0000-0x000000006F115000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    212KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5413-0x00000000707A0000-0x00000000707B0000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    64KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5412-0x00000000709A0000-0x00000000709CF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    188KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5399-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5615-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5616-0x0000000070A70000-0x0000000070A7C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5617-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5618-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5619-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5621-0x00000000032A0000-0x00000000034FC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5353-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5355-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5358-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5630-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5628-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5629-0x000000006EFC0000-0x000000006F538000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5623-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5624-0x0000000070A00000-0x0000000070A15000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    84KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5625-0x00000000709D0000-0x00000000709F7000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    156KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5627-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5620-0x000000006FFB0000-0x0000000070044000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/1128-5622-0x000000006F540000-0x000000006F79C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/4028-4954-0x0000000000BD0000-0x0000000000C06000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    216KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/4028-1276-0x0000000000BD0000-0x0000000000C06000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    216KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/4028-1061-0x0000000073E70000-0x0000000073E82000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    72KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/4028-1051-0x0000000073E70000-0x0000000073E82000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    72KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/5716-4955-0x00000000001E0000-0x0000000000216000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    216KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/5716-1278-0x00000000001E0000-0x0000000000216000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    216KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5509-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5552-0x00000000709D0000-0x00000000709F7000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    156KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5551-0x0000000070A00000-0x0000000070A15000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    84KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5550-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5549-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5548-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5547-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5546-0x000000006FDF0000-0x000000007004C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5544-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5543-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5542-0x0000000070A70000-0x0000000070A7C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5540-0x000000006EFC0000-0x000000006F0D4000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    1.1MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5539-0x000000006FDC0000-0x000000006FDCA000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    40KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5538-0x000000006F0E0000-0x000000006F115000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    212KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5537-0x00000000707A0000-0x00000000707B0000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    64KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5536-0x00000000709A0000-0x00000000709CF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    188KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5523-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5553-0x000000006F180000-0x000000006F6F8000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5545-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5520-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5521-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5519-0x000000006EFC0000-0x000000006F0D4000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    1.1MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5517-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5518-0x000000006FDC0000-0x000000006FDCA000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    40KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5516-0x000000006F0E0000-0x000000006F115000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    212KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5514-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5515-0x00000000707A0000-0x00000000707B0000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    64KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5513-0x00000000709A0000-0x00000000709CF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    188KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5512-0x000000006F180000-0x000000006F6F8000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    5.5MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5510-0x0000000070A00000-0x0000000070A15000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    84KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5511-0x00000000709D0000-0x00000000709F7000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    156KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5506-0x0000000070A20000-0x0000000070A48000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    160KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5507-0x000000006F700000-0x000000006F794000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    592KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5508-0x000000006FDF0000-0x000000007004C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    2.4MB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5504-0x0000000070A60000-0x0000000070A6C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5505-0x0000000070A50000-0x0000000070A5D000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    52KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5502-0x0000000070A80000-0x0000000070A96000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    88KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5503-0x0000000070A70000-0x0000000070A7C000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5500-0x0000000070AB0000-0x0000000070ACF000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    124KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5501-0x0000000070AA0000-0x0000000070AAC000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    48KB

                                                                                                                                                    Download

                                                                                                                                                  • memory/6136-5499-0x000000006F7A0000-0x000000006FBE3000-memory.dmp

                                                                                                                                                    Filesize

                                                                                                                                                    4.3MB

                                                                                                                                                    Download